pandora/workflow-checker.woodpecker
Watch
3
0
Fork
You've already forked workflow-checker.woodpecker
 0
generated from pandora/woodpecker-plugin.template
Code Issues 2 Pull requests Projects Releases 3 Packages 1 Wiki Activity Actions

Vulnerability dashboard #5

New issue
Open
opened 2026-07-18 19:09:50 +00:00 by bot-ci · 0 comments
bot-ci commented 2026-07-18 19:09:50 +00:00
Owner
Copy link

This issue list updates about vulnerabilities that are detected by trivy.woodpecker plugin.

Summary

Severity Count
CRITICAL 0
HIGH 1
MEDIUM 1
LOW 0
UNKNOWN 3

Detected packages and vulnerabilities

Packages

code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest (debian 13.6)

code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest

Name Version
base-files 13.8+deb13u6
media-types 13.0.0
netbase 6.5
tzdata 2026b
tzdata-legacy 2026b

usr/bin/woodpecker-cli

code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest

Name Version
go.woodpecker-ci.org/woodpecker/v3 v3.16.0
stdlib v1.26.4
al.essio.dev/pkg/shellescape v1.6.0
charm.land/bubbles/v2 v2.0.0
charm.land/bubbletea/v2 v2.0.2
charm.land/huh/v2 v2.0.3
charm.land/lipgloss/v2 v2.0.1
codeberg.org/6543/go-yaml2json/v2 v2.0.0
codeberg.org/6543/xyaml/v2 v2.0.1
github.com/6543/logfile-open v1.2.1
github.com/adrg/xdg v0.5.3
github.com/atotto/clipboard v0.1.4
github.com/aymanbagabas/go-osc52/v2 v2.0.1
github.com/bmatcuk/doublestar/v4 v4.10.0
github.com/catppuccin/go v0.3.0
github.com/cenkalti/backoff/v6 v6.0.1
github.com/cespare/xxhash/v2 v2.3.0
github.com/charmbracelet/colorprofile v0.4.2
github.com/charmbracelet/ultraviolet v0.0.0-20260205113103-524a6607adb8
github.com/charmbracelet/x/ansi v0.11.6
github.com/charmbracelet/x/exp/ordered v0.1.0
github.com/charmbracelet/x/exp/strings v0.0.0-20240722160745-212f7b056ed0
github.com/charmbracelet/x/term v0.2.2
github.com/charmbracelet/x/termios v0.1.1
github.com/charmbracelet/x/windows v0.2.2
github.com/clipperhouse/displaywidth v0.11.0
github.com/clipperhouse/uax29/v2 v2.7.0
github.com/containerd/errdefs v1.0.0
github.com/containerd/errdefs/pkg v0.3.0
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
github.com/distribution/reference v0.6.0
github.com/docker/cli v29.6.0+incompatible
github.com/docker/docker-credential-helpers v0.8.0
github.com/docker/go-connections v0.7.0
github.com/docker/go-units v0.5.0
github.com/drone/envsubst v1.0.3
github.com/dustin/go-humanize v1.0.1
github.com/emicklei/go-restful/v3 v3.13.0
github.com/expr-lang/expr v1.17.8
github.com/fatih/color v1.18.0
github.com/felixge/httpsnoop v1.0.4
github.com/fxamacker/cbor/v2 v2.9.0
github.com/gabriel-vasile/mimetype v1.4.12
github.com/gin-contrib/sse v1.1.0
github.com/gin-gonic/gin v1.12.0
github.com/gitsight/go-vcsurl v1.0.1
github.com/go-logr/logr v1.4.3
github.com/go-logr/stdr v1.2.2
github.com/go-openapi/jsonpointer v0.22.4
github.com/go-openapi/jsonreference v0.21.4
github.com/go-openapi/swag v0.25.4
github.com/go-openapi/swag/cmdutils v0.25.4
github.com/go-openapi/swag/conv v0.25.4
github.com/go-openapi/swag/fileutils v0.25.4
github.com/go-openapi/swag/jsonname v0.25.4
github.com/go-openapi/swag/jsonutils v0.25.4
github.com/go-openapi/swag/loading v0.25.4
github.com/go-openapi/swag/mangling v0.25.4
github.com/go-openapi/swag/netutils v0.25.4
github.com/go-openapi/swag/stringutils v0.25.4
github.com/go-openapi/swag/typeutils v0.25.4
github.com/go-openapi/swag/yamlutils v0.25.4
github.com/go-playground/locales v0.14.1
github.com/go-playground/universal-translator v0.18.1
github.com/go-playground/validator/v10 v10.30.1
github.com/go-viper/mapstructure/v2 v2.5.0
github.com/goccy/go-yaml v1.19.2
github.com/godbus/dbus/v5 v5.2.2
github.com/google/gnostic-models v0.7.0
github.com/google/uuid v1.6.0
github.com/hashicorp/go-hclog v1.6.3
github.com/joho/godotenv v1.5.1
github.com/json-iterator/go v1.1.12
github.com/leodido/go-urn v1.4.0
github.com/lucasb-eyer/go-colorful v1.3.0
github.com/mattn/go-colorable v0.1.14
github.com/mattn/go-isatty v0.0.20
github.com/mattn/go-runewidth v0.0.20
github.com/mitchellh/hashstructure/v2 v2.0.2
github.com/moby/docker-image-spec v1.3.1
github.com/moby/moby/api v1.55.0
github.com/moby/moby/client v0.5.0
github.com/moby/term v0.5.2
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
github.com/muesli/cancelreader v0.2.2
github.com/muesli/termenv v0.16.0
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
github.com/oklog/ulid/v2 v2.1.1
github.com/opencontainers/go-digest v1.0.0
github.com/opencontainers/image-spec v1.1.1
github.com/pelletier/go-toml/v2 v2.2.4
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
github.com/quic-go/qpack v0.6.0
github.com/quic-go/quic-go v0.59.1
github.com/rivo/uniseg v0.4.7
github.com/rs/zerolog v1.35.1
github.com/sirupsen/logrus v1.9.4
github.com/spf13/pflag v1.0.10
github.com/ugorji/go/codec v1.3.1
github.com/urfave/cli/v3 v3.10.0
github.com/x448/float16 v0.8.4
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
github.com/xeipuuv/gojsonschema v1.2.0
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e
github.com/zalando/go-keyring v0.2.8
go.mongodb.org/mongo-driver/v2 v2.5.0
go.opentelemetry.io/auto/sdk v1.2.1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0
go.opentelemetry.io/otel v1.43.0
go.opentelemetry.io/otel/metric v1.43.0
go.opentelemetry.io/otel/trace v1.43.0
go.uber.org/multierr v1.11.0
go.yaml.in/yaml/v2 v2.4.3
go.yaml.in/yaml/v3 v3.0.4
go.yaml.in/yaml/v4 v4.0.0-rc.6
golang.org/x/crypto v0.53.0
golang.org/x/net v0.56.0
golang.org/x/oauth2 v0.36.0
golang.org/x/sync v0.21.0
golang.org/x/sys v0.46.0
golang.org/x/term v0.44.0
golang.org/x/text v0.38.0
golang.org/x/time v0.15.0
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af
gopkg.in/evanphx/json-patch.v4 v4.13.0
gopkg.in/inf.v0 v0.9.1
k8s.io/api v0.36.2
k8s.io/apimachinery v0.36.2
k8s.io/client-go v0.36.2
k8s.io/klog/v2 v2.140.0
k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a
k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
sigs.k8s.io/randfill v1.0.0
sigs.k8s.io/structured-merge-diff/v6 v6.3.2
sigs.k8s.io/yaml v1.6.0

usr/local/bin/atis

code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest

Name Version
codeberg.org/onlyati/atis v0.4.0+dirty
stdlib v1.26.5
codeberg.org/mvdkleijn/forgejo-sdk/forgejo/v3 v3.0.0
github.com/42wim/httpsig v1.2.4
github.com/ProtonMail/go-crypto v1.4.1
github.com/alecthomas/kong v1.16.0
github.com/aws/aws-sdk-go-v2 v1.42.1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14
github.com/aws/aws-sdk-go-v2/config v1.32.30
github.com/aws/aws-sdk-go-v2/credentials v1.19.29
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.30
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.3.4
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.30
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.30
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.31
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.23
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.30
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.31
github.com/aws/aws-sdk-go-v2/service/s3 v1.105.2
github.com/aws/aws-sdk-go-v2/service/signin v1.4.1
github.com/aws/aws-sdk-go-v2/service/sso v1.32.1
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.37.1
github.com/aws/aws-sdk-go-v2/service/sts v1.44.1
github.com/aws/smithy-go v1.27.3
github.com/cloudflare/circl v1.6.4
github.com/coreos/go-systemd/v22 v22.7.0
github.com/docker/cli v29.5.3+incompatible
github.com/docker/docker-credential-helpers v0.9.3
github.com/emirpasic/gods v1.18.1
github.com/go-fed/httpsig v1.1.0
github.com/go-git/gcfg/v2 v2.0.2
github.com/go-git/go-billy/v6 v6.0.0-alpha.1
github.com/go-git/go-git/v6 v6.0.0-alpha.4
github.com/go-openapi/errors v0.22.8
github.com/go-openapi/jsonpointer v1.0.0
github.com/go-openapi/strfmt v0.26.4
github.com/go-openapi/swag v0.27.0
github.com/go-openapi/swag/cmdutils v0.27.0
github.com/go-openapi/swag/conv v0.27.0
github.com/go-openapi/swag/fileutils v0.27.0
github.com/go-openapi/swag/jsonutils v0.27.0
github.com/go-openapi/swag/loading v0.27.0
github.com/go-openapi/swag/mangling v0.27.0
github.com/go-openapi/swag/netutils v0.27.0
github.com/go-openapi/swag/stringutils v0.27.0
github.com/go-openapi/swag/typeutils v0.27.0
github.com/go-openapi/swag/yamlutils v0.27.0
github.com/go-viper/mapstructure/v2 v2.5.0
github.com/goccy/go-yaml v1.19.2
github.com/godbus/dbus/v5 v5.2.2
github.com/google/go-containerregistry v0.21.7
github.com/google/uuid v1.6.0
github.com/hashicorp/go-version v1.9.0
github.com/kevinburke/ssh_config v1.6.0
github.com/klauspost/compress v1.18.6
github.com/klauspost/cpuid/v2 v2.4.0
github.com/oklog/ulid/v2 v2.1.1
github.com/opencontainers/go-digest v1.0.0
github.com/opencontainers/image-spec v1.1.1
github.com/pjbgf/sha1cd v0.6.0
github.com/sergi/go-diff v1.4.0
github.com/sirupsen/logrus v1.9.4
github.com/yuin/gopher-lua v1.1.2
go.yaml.in/yaml/v3 v3.0.4
golang.org/x/crypto v0.54.0
golang.org/x/net v0.56.0
golang.org/x/sync v0.22.0
golang.org/x/sys v0.47.0
golang.org/x/text v0.40.0
Vulnerabilities

usr/bin/woodpecker-cli

code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest

Package Name Severity Installed version Fixed Version Status Link
golang.org/x/crypto UNKNOWN v0.53.0 affected GO-2026-5932
golang.org/x/text UNKNOWN v0.38.0 0.39.0 fixed CVE-2026-56852
stdlib HIGH v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 fixed CVE-2026-39822
stdlib MEDIUM v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 fixed CVE-2026-42505

usr/local/bin/atis

code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest

Package Name Severity Installed version Fixed Version Status Link
golang.org/x/crypto UNKNOWN v0.54.0 affected GO-2026-5932
This issue list updates about vulnerabilities that are detected by [trivy.woodpecker](https://code.thinkaboutit.tech/pandora/trivy.woodpecker) plugin. ## Summary | Severity | Count | | -------- | ----- | | CRITICAL | 0 | | HIGH | 1 | | MEDIUM | 1 | | LOW | 0 | | UNKNOWN | 3 | ## Detected packages and vulnerabilities <details><summary>Packages</summary> ### code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest (debian 13.6) **code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest** | Name | Version | | ---- | ------- | | base-files | 13.8+deb13u6 | | media-types | 13.0.0 | | netbase | 6.5 | | tzdata | 2026b | | tzdata-legacy | 2026b | ### usr/bin/woodpecker-cli **code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest** | Name | Version | | ---- | ------- | | go.woodpecker-ci.org/woodpecker/v3 | v3.16.0 | | stdlib | v1.26.4 | | al.essio.dev/pkg/shellescape | v1.6.0 | | charm.land/bubbles/v2 | v2.0.0 | | charm.land/bubbletea/v2 | v2.0.2 | | charm.land/huh/v2 | v2.0.3 | | charm.land/lipgloss/v2 | v2.0.1 | | codeberg.org/6543/go-yaml2json/v2 | v2.0.0 | | codeberg.org/6543/xyaml/v2 | v2.0.1 | | github.com/6543/logfile-open | v1.2.1 | | github.com/adrg/xdg | v0.5.3 | | github.com/atotto/clipboard | v0.1.4 | | github.com/aymanbagabas/go-osc52/v2 | v2.0.1 | | github.com/bmatcuk/doublestar/v4 | v4.10.0 | | github.com/catppuccin/go | v0.3.0 | | github.com/cenkalti/backoff/v6 | v6.0.1 | | github.com/cespare/xxhash/v2 | v2.3.0 | | github.com/charmbracelet/colorprofile | v0.4.2 | | github.com/charmbracelet/ultraviolet | v0.0.0-20260205113103-524a6607adb8 | | github.com/charmbracelet/x/ansi | v0.11.6 | | github.com/charmbracelet/x/exp/ordered | v0.1.0 | | github.com/charmbracelet/x/exp/strings | v0.0.0-20240722160745-212f7b056ed0 | | github.com/charmbracelet/x/term | v0.2.2 | | github.com/charmbracelet/x/termios | v0.1.1 | | github.com/charmbracelet/x/windows | v0.2.2 | | github.com/clipperhouse/displaywidth | v0.11.0 | | github.com/clipperhouse/uax29/v2 | v2.7.0 | | github.com/containerd/errdefs | v1.0.0 | | github.com/containerd/errdefs/pkg | v0.3.0 | | github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | | github.com/distribution/reference | v0.6.0 | | github.com/docker/cli | v29.6.0+incompatible | | github.com/docker/docker-credential-helpers | v0.8.0 | | github.com/docker/go-connections | v0.7.0 | | github.com/docker/go-units | v0.5.0 | | github.com/drone/envsubst | v1.0.3 | | github.com/dustin/go-humanize | v1.0.1 | | github.com/emicklei/go-restful/v3 | v3.13.0 | | github.com/expr-lang/expr | v1.17.8 | | github.com/fatih/color | v1.18.0 | | github.com/felixge/httpsnoop | v1.0.4 | | github.com/fxamacker/cbor/v2 | v2.9.0 | | github.com/gabriel-vasile/mimetype | v1.4.12 | | github.com/gin-contrib/sse | v1.1.0 | | github.com/gin-gonic/gin | v1.12.0 | | github.com/gitsight/go-vcsurl | v1.0.1 | | github.com/go-logr/logr | v1.4.3 | | github.com/go-logr/stdr | v1.2.2 | | github.com/go-openapi/jsonpointer | v0.22.4 | | github.com/go-openapi/jsonreference | v0.21.4 | | github.com/go-openapi/swag | v0.25.4 | | github.com/go-openapi/swag/cmdutils | v0.25.4 | | github.com/go-openapi/swag/conv | v0.25.4 | | github.com/go-openapi/swag/fileutils | v0.25.4 | | github.com/go-openapi/swag/jsonname | v0.25.4 | | github.com/go-openapi/swag/jsonutils | v0.25.4 | | github.com/go-openapi/swag/loading | v0.25.4 | | github.com/go-openapi/swag/mangling | v0.25.4 | | github.com/go-openapi/swag/netutils | v0.25.4 | | github.com/go-openapi/swag/stringutils | v0.25.4 | | github.com/go-openapi/swag/typeutils | v0.25.4 | | github.com/go-openapi/swag/yamlutils | v0.25.4 | | github.com/go-playground/locales | v0.14.1 | | github.com/go-playground/universal-translator | v0.18.1 | | github.com/go-playground/validator/v10 | v10.30.1 | | github.com/go-viper/mapstructure/v2 | v2.5.0 | | github.com/goccy/go-yaml | v1.19.2 | | github.com/godbus/dbus/v5 | v5.2.2 | | github.com/google/gnostic-models | v0.7.0 | | github.com/google/uuid | v1.6.0 | | github.com/hashicorp/go-hclog | v1.6.3 | | github.com/joho/godotenv | v1.5.1 | | github.com/json-iterator/go | v1.1.12 | | github.com/leodido/go-urn | v1.4.0 | | github.com/lucasb-eyer/go-colorful | v1.3.0 | | github.com/mattn/go-colorable | v0.1.14 | | github.com/mattn/go-isatty | v0.0.20 | | github.com/mattn/go-runewidth | v0.0.20 | | github.com/mitchellh/hashstructure/v2 | v2.0.2 | | github.com/moby/docker-image-spec | v1.3.1 | | github.com/moby/moby/api | v1.55.0 | | github.com/moby/moby/client | v0.5.0 | | github.com/moby/term | v0.5.2 | | github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | | github.com/modern-go/reflect2 | v1.0.3-0.20250322232337-35a7c28c31ee | | github.com/muesli/cancelreader | v0.2.2 | | github.com/muesli/termenv | v0.16.0 | | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | | github.com/oklog/ulid/v2 | v2.1.1 | | github.com/opencontainers/go-digest | v1.0.0 | | github.com/opencontainers/image-spec | v1.1.1 | | github.com/pelletier/go-toml/v2 | v2.2.4 | | github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | | github.com/quic-go/qpack | v0.6.0 | | github.com/quic-go/quic-go | v0.59.1 | | github.com/rivo/uniseg | v0.4.7 | | github.com/rs/zerolog | v1.35.1 | | github.com/sirupsen/logrus | v1.9.4 | | github.com/spf13/pflag | v1.0.10 | | github.com/ugorji/go/codec | v1.3.1 | | github.com/urfave/cli/v3 | v3.10.0 | | github.com/x448/float16 | v0.8.4 | | github.com/xeipuuv/gojsonpointer | v0.0.0-20190905194746-02993c407bfb | | github.com/xeipuuv/gojsonreference | v0.0.0-20180127040603-bd5ef7bd5415 | | github.com/xeipuuv/gojsonschema | v1.2.0 | | github.com/xo/terminfo | v0.0.0-20220910002029-abceb7e1c41e | | github.com/zalando/go-keyring | v0.2.8 | | go.mongodb.org/mongo-driver/v2 | v2.5.0 | | go.opentelemetry.io/auto/sdk | v1.2.1 | | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.63.0 | | go.opentelemetry.io/otel | v1.43.0 | | go.opentelemetry.io/otel/metric | v1.43.0 | | go.opentelemetry.io/otel/trace | v1.43.0 | | go.uber.org/multierr | v1.11.0 | | go.yaml.in/yaml/v2 | v2.4.3 | | go.yaml.in/yaml/v3 | v3.0.4 | | go.yaml.in/yaml/v4 | v4.0.0-rc.6 | | golang.org/x/crypto | v0.53.0 | | golang.org/x/net | v0.56.0 | | golang.org/x/oauth2 | v0.36.0 | | golang.org/x/sync | v0.21.0 | | golang.org/x/sys | v0.46.0 | | golang.org/x/term | v0.44.0 | | golang.org/x/text | v0.38.0 | | golang.org/x/time | v0.15.0 | | google.golang.org/protobuf | v1.36.12-0.20260120151049-f2248ac996af | | gopkg.in/evanphx/json-patch.v4 | v4.13.0 | | gopkg.in/inf.v0 | v0.9.1 | | k8s.io/api | v0.36.2 | | k8s.io/apimachinery | v0.36.2 | | k8s.io/client-go | v0.36.2 | | k8s.io/klog/v2 | v2.140.0 | | k8s.io/kube-openapi | v0.0.0-20260317180543-43fb72c5454a | | k8s.io/utils | v0.0.0-20260210185600-b8788abfbbc2 | | sigs.k8s.io/json | v0.0.0-20250730193827-2d320260d730 | | sigs.k8s.io/randfill | v1.0.0 | | sigs.k8s.io/structured-merge-diff/v6 | v6.3.2 | | sigs.k8s.io/yaml | v1.6.0 | ### usr/local/bin/atis **code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest** | Name | Version | | ---- | ------- | | codeberg.org/onlyati/atis | v0.4.0+dirty | | stdlib | v1.26.5 | | codeberg.org/mvdkleijn/forgejo-sdk/forgejo/v3 | v3.0.0 | | github.com/42wim/httpsig | v1.2.4 | | github.com/ProtonMail/go-crypto | v1.4.1 | | github.com/alecthomas/kong | v1.16.0 | | github.com/aws/aws-sdk-go-v2 | v1.42.1 | | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.7.14 | | github.com/aws/aws-sdk-go-v2/config | v1.32.30 | | github.com/aws/aws-sdk-go-v2/credentials | v1.19.29 | | github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.18.30 | | github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager | v0.3.4 | | github.com/aws/aws-sdk-go-v2/internal/configsources | v1.4.30 | | github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.7.30 | | github.com/aws/aws-sdk-go-v2/internal/v4a | v1.4.31 | | github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding | v1.13.13 | | github.com/aws/aws-sdk-go-v2/service/internal/checksum | v1.9.23 | | github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.13.30 | | github.com/aws/aws-sdk-go-v2/service/internal/s3shared | v1.19.31 | | github.com/aws/aws-sdk-go-v2/service/s3 | v1.105.2 | | github.com/aws/aws-sdk-go-v2/service/signin | v1.4.1 | | github.com/aws/aws-sdk-go-v2/service/sso | v1.32.1 | | github.com/aws/aws-sdk-go-v2/service/ssooidc | v1.37.1 | | github.com/aws/aws-sdk-go-v2/service/sts | v1.44.1 | | github.com/aws/smithy-go | v1.27.3 | | github.com/cloudflare/circl | v1.6.4 | | github.com/coreos/go-systemd/v22 | v22.7.0 | | github.com/docker/cli | v29.5.3+incompatible | | github.com/docker/docker-credential-helpers | v0.9.3 | | github.com/emirpasic/gods | v1.18.1 | | github.com/go-fed/httpsig | v1.1.0 | | github.com/go-git/gcfg/v2 | v2.0.2 | | github.com/go-git/go-billy/v6 | v6.0.0-alpha.1 | | github.com/go-git/go-git/v6 | v6.0.0-alpha.4 | | github.com/go-openapi/errors | v0.22.8 | | github.com/go-openapi/jsonpointer | v1.0.0 | | github.com/go-openapi/strfmt | v0.26.4 | | github.com/go-openapi/swag | v0.27.0 | | github.com/go-openapi/swag/cmdutils | v0.27.0 | | github.com/go-openapi/swag/conv | v0.27.0 | | github.com/go-openapi/swag/fileutils | v0.27.0 | | github.com/go-openapi/swag/jsonutils | v0.27.0 | | github.com/go-openapi/swag/loading | v0.27.0 | | github.com/go-openapi/swag/mangling | v0.27.0 | | github.com/go-openapi/swag/netutils | v0.27.0 | | github.com/go-openapi/swag/stringutils | v0.27.0 | | github.com/go-openapi/swag/typeutils | v0.27.0 | | github.com/go-openapi/swag/yamlutils | v0.27.0 | | github.com/go-viper/mapstructure/v2 | v2.5.0 | | github.com/goccy/go-yaml | v1.19.2 | | github.com/godbus/dbus/v5 | v5.2.2 | | github.com/google/go-containerregistry | v0.21.7 | | github.com/google/uuid | v1.6.0 | | github.com/hashicorp/go-version | v1.9.0 | | github.com/kevinburke/ssh_config | v1.6.0 | | github.com/klauspost/compress | v1.18.6 | | github.com/klauspost/cpuid/v2 | v2.4.0 | | github.com/oklog/ulid/v2 | v2.1.1 | | github.com/opencontainers/go-digest | v1.0.0 | | github.com/opencontainers/image-spec | v1.1.1 | | github.com/pjbgf/sha1cd | v0.6.0 | | github.com/sergi/go-diff | v1.4.0 | | github.com/sirupsen/logrus | v1.9.4 | | github.com/yuin/gopher-lua | v1.1.2 | | go.yaml.in/yaml/v3 | v3.0.4 | | golang.org/x/crypto | v0.54.0 | | golang.org/x/net | v0.56.0 | | golang.org/x/sync | v0.22.0 | | golang.org/x/sys | v0.47.0 | | golang.org/x/text | v0.40.0 | </details> <details><summary>Vulnerabilities</summary> ### usr/bin/woodpecker-cli **code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest** | Package Name | Severity | Installed version | Fixed Version | Status | Link | | ------------ | -------- | ----------------- | ------------- | ------ | ---- | | golang.org/x/crypto | UNKNOWN | v0.53.0 | | affected | [GO-2026-5932]() | | golang.org/x/text | UNKNOWN | v0.38.0 | 0.39.0 | fixed | [CVE-2026-56852](https://avd.aquasec.com/nvd/cve-2026-56852) | | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | fixed | [CVE-2026-39822](https://avd.aquasec.com/nvd/cve-2026-39822) | | stdlib | MEDIUM | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | fixed | [CVE-2026-42505](https://avd.aquasec.com/nvd/cve-2026-42505) | ### usr/local/bin/atis **code.thinkaboutit.tech/pandora/workflow-checker.woodpecker:latest** | Package Name | Severity | Installed version | Fixed Version | Status | Link | | ------------ | -------- | ----------------- | ------------- | ------ | ---- | | golang.org/x/crypto | UNKNOWN | v0.54.0 | | affected | [GO-2026-5932]() | </details>
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
0.1.2
0.1.1
0.1.0
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
pandora/workflow-checker.woodpecker#5
No description provided.