{"commit":"3acdcdae1038baf1a9218603d47d0ab85a5659c7","date":"2026-11-01","generated_at":"2026-11-01T19:08:51+00:00","projects":[{"added":0,"category":"Software Composition Analysis (SCA)","change_any":false,"commit":"1c37c007d2b625cf9a89f2484634c8ed7a725270","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":7,"errors":[],"fixable":1,"go_version":null,"id":"AikidoSec__safe-chain","in_binary":null,"integrity_drift":0,"name":"safe-chain","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":15,"ref":"1.5.27","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-30T08:13:34Z","removed":0,"repository":"AikidoSec/safe-chain","resolved_vulnerabilities":0,"scorecard":4.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":1,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":18,"Low":2,"Medium":7,"files":4}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a JavaScript/Node.js","change_any":false,"commit":"7cf982f07d1b04f32951b532e296b705ba370a46","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":8,"errors":[],"fixable":0,"go_version":null,"id":"ajinabraham__njsscan","in_binary":null,"integrity_drift":0,"name":"njsscan","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"1.0.2","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-10-27T02:11:00Z","removed":0,"repository":"ajinabraham/njsscan","resolved_vulnerabilities":0,"scorecard":5.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":0,"Low":0,"Medium":3,"files":4}},{"added":0,"category":"Software Composition Analysis (SCA)","change_any":false,"commit":"afe2742527d98d822da06c9f32eed86fe3d193e0","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":375,"errors":[],"fixable":3,"go_version":"go1.26.8","id":"anchore__grype","in_binary":{"dependencies":8,"stdlib":13,"total":21},"integrity_drift":0,"name":"grype","new_vulnerabilities":0,"osv_confirmed":9,"osv_only":0,"ref":"v0.121.0","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-19T20:32:56Z","removed":0,"repository":"anchore/grype","resolved_vulnerabilities":0,"scorecard":7.9,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":4,"Low":0,"Medium":2,"Negligible":0,"Unknown":3},"workflow":{"High":0,"Low":9,"Medium":0,"files":6}},{"added":0,"category":"SBOM Generation","change_any":false,"commit":"f15c3343e29dfb20cf6d82c820e7090b49808c96","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":382,"errors":[],"fixable":48,"go_version":"go1.26.8","id":"anchore__syft","in_binary":{"dependencies":3,"stdlib":13,"total":16},"integrity_drift":0,"name":"syft","new_vulnerabilities":0,"osv_confirmed":49,"osv_only":0,"ref":"v1.55.0","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-19T19:01:26Z","removed":0,"repository":"anchore/syft","resolved_vulnerabilities":0,"scorecard":8.7,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":20,"Low":2,"Medium":24,"Negligible":0,"Unknown":3},"workflow":{"High":0,"Low":8,"Medium":0,"files":7}},{"added":0,"category":"Kubernetes Security","change_any":false,"commit":"5c6c22d51b926020e7414e1f1e051851d1a2feff","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":101,"errors":[],"fixable":8,"go_version":"go1.26.3","id":"aquasecurity__kube-bench","in_binary":{"dependencies":3,"stdlib":26,"total":29},"integrity_drift":0,"name":"kube-bench","new_vulnerabilities":0,"osv_confirmed":8,"osv_only":0,"ref":"v0.16.0","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2026-08-05T12:16:28Z","removed":0,"repository":"aquasecurity/kube-bench","resolved_vulnerabilities":0,"scorecard":5.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":5,"Low":0,"Medium":0,"Negligible":0,"Unknown":2},"workflow":{"High":1,"Low":0,"Medium":8,"files":4}},{"added":0,"category":"Container Security \u203a Runtime Security","change_any":false,"commit":"b40e7f3f89ade93b7f480b9007ab8aafeb978472","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":194,"errors":[],"fixable":74,"go_version":"go1.24.9","id":"aquasecurity__tracee","in_binary":{"dependencies":18,"stdlib":39,"total":57},"integrity_drift":0,"name":"tracee","new_vulnerabilities":0,"osv_confirmed":84,"osv_only":0,"ref":"v0.24.1","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2025-11-19T00:31:18Z","removed":0,"repository":"aquasecurity/tracee","resolved_vulnerabilities":0,"scorecard":7.0,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":12,"High":34,"Low":3,"Medium":30,"Negligible":0,"Unknown":5},"workflow":{"High":16,"Low":6,"Medium":20,"files":17}},{"added":0,"category":"Software Composition Analysis (SCA)","change_any":false,"commit":"e713f67f7d54decdcd9b3132c9751833dcced698","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":509,"errors":[],"fixable":3,"go_version":"go1.27.3","id":"aquasecurity__trivy","in_binary":{"dependencies":3,"stdlib":0,"total":3},"integrity_drift":0,"name":"trivy","new_vulnerabilities":0,"osv_confirmed":10,"osv_only":0,"ref":"v0.76.1","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-21T11:18:34Z","removed":0,"repository":"aquasecurity/trivy","resolved_vulnerabilities":0,"scorecard":7.1,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":4,"Low":0,"Medium":3,"Negligible":0,"Unknown":3},"workflow":{"High":1,"Low":17,"Medium":46,"files":23}},{"added":0,"category":"Kubernetes Security","change_any":false,"commit":"b40091af2bfba4c90b109fc0817d6c3f49bfc9a4","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":425,"errors":[],"fixable":0,"go_version":"go1.27.3","id":"aquasecurity__trivy-operator","in_binary":{"dependencies":1,"stdlib":0,"total":1},"integrity_drift":0,"name":"trivy-operator","new_vulnerabilities":0,"osv_confirmed":1,"osv_only":1,"ref":"v0.36.1","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-29T07:35:21Z","removed":0,"repository":"aquasecurity/trivy-operator","resolved_vulnerabilities":0,"scorecard":7.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":1},"workflow":{"High":1,"Low":0,"Medium":0,"files":9}},{"added":0,"category":"API & Dynamic Testing (DAST)","change_any":false,"commit":"2b20a2cfb50d07ab35ed1b5a47309d91b9ef5890","compliance":{},"date":"2026-11-01","dependencies":0,"errors":[],"fixable":0,"go_version":null,"id":"ASCIT31__Dark-Moon","in_binary":null,"integrity_drift":0,"name":"Dark-Moon","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"v1.6.0","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-10-25T12:10:25Z","removed":0,"repository":"ASCIT31/Dark-Moon","resolved_vulnerabilities":0,"scorecard":3.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":0,"Low":0,"Medium":0,"files":0}},{"added":0,"category":"Infrastructure as Code Security","change_any":false,"commit":"cf5360c6ce4c9911d84858896ac7aa925f8cb4bd","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":7,"errors":[],"fixable":2,"go_version":null,"id":"aws-cloudformation__cfn-lint","in_binary":null,"integrity_drift":0,"name":"cfn-lint","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"v1.59.0","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-10-28T18:33:59Z","removed":0,"repository":"aws-cloudformation/cfn-lint","resolved_vulnerabilities":0,"scorecard":6.0,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":0,"Low":1,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":28,"Low":0,"Medium":0,"files":6}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Multi-language","change_any":false,"commit":"668f5df05042088125d83d197252b5a8e78422df","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":146,"errors":[],"fixable":3,"go_version":"go1.26.9","id":"Bearer__bearer","in_binary":{"dependencies":1,"stdlib":1,"total":2},"integrity_drift":0,"name":"bearer","new_vulnerabilities":0,"osv_confirmed":4,"osv_only":1,"ref":"v2.1.3","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2026-10-28T14:31:00Z","removed":0,"repository":"Bearer/bearer","resolved_vulnerabilities":0,"scorecard":6.3,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":1,"Negligible":0,"Unknown":3},"workflow":{"High":6,"Low":2,"Medium":4,"files":10}},{"added":0,"category":"Secret Management","change_any":false,"commit":"51799eb6dd970239e356c1ccffd354fe74408700","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":102,"errors":[],"fixable":2,"go_version":"go1.27.3","id":"bitnami-labs__sealed-secrets","in_binary":{"dependencies":0,"stdlib":0,"total":0},"integrity_drift":0,"name":"sealed-secrets","new_vulnerabilities":0,"osv_confirmed":3,"osv_only":0,"ref":"v0.41.2","ref_kind":"release","release_changed":false,"release_integrity":"signed","released_at":"2026-10-26T12:51:24Z","removed":0,"repository":"bitnami-labs/sealed-secrets","resolved_vulnerabilities":0,"scorecard":6.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":3},"workflow":{"High":5,"Low":8,"Medium":0,"files":6}},{"added":0,"category":"Infrastructure as Code Security","change_any":false,"commit":"9504d068f8411b04a0ad67099d0d302242ba7d43","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":133,"errors":[],"fixable":89,"go_version":null,"id":"bridgecrewio__checkov","in_binary":null,"integrity_drift":0,"name":"checkov","new_vulnerabilities":0,"osv_confirmed":59,"osv_only":48,"ref":"3.4.0","ref_kind":"release","release_changed":false,"release_integrity":"none","released_at":"2026-10-28T23:02:47Z","removed":0,"repository":"bridgecrewio/checkov","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":3,"High":49,"Low":6,"Medium":32,"Negligible":0,"Unknown":0},"workflow":{"High":10,"Low":3,"Medium":4,"files":10}},{"added":0,"category":"Infrastructure as Code Security","change_any":false,"commit":"453066aa9c66014ad7aee7dd0149ba1944c78050","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":373,"errors":[],"fixable":21,"go_version":null,"id":"Checkmarx__kics","in_binary":null,"integrity_drift":0,"name":"kics","new_vulnerabilities":0,"osv_confirmed":26,"osv_only":0,"ref":"v2.2.0","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-09-17T10:33:31Z","removed":0,"repository":"Checkmarx/kics","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":4,"High":8,"Low":4,"Medium":7,"Negligible":0,"Unknown":3},"workflow":{"High":0,"Low":2,"Medium":0,"files":37}},{"added":0,"category":"Container Security \u203a Runtime Security","change_any":false,"commit":"a5a667837d4b1ecd9018797994bb4e39b98702e1","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":220,"errors":[],"fixable":0,"go_version":"go1.27.3","id":"cilium__tetragon","in_binary":{"dependencies":0,"stdlib":0,"total":0},"integrity_drift":0,"name":"tetragon","new_vulnerabilities":0,"osv_confirmed":5,"osv_only":0,"ref":"v1.8.0","ref_kind":"release","release_changed":false,"release_integrity":"none","released_at":"2026-10-30T17:18:17Z","removed":0,"repository":"cilium/tetragon","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":3,"Low":0,"Medium":2,"Negligible":0,"Unknown":0},"workflow":{"High":33,"Low":15,"Medium":40,"files":37}},{"added":0,"category":"Cloud Security","change_any":false,"commit":"f285a9cb1649c986dd32c21d8b74d6f086b0d965","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":975,"errors":[],"fixable":65,"go_version":"go1.27.3","id":"cloudquery__cloudquery","in_binary":{"dependencies":8,"stdlib":0,"total":8},"integrity_drift":0,"name":"cloudquery","new_vulnerabilities":0,"osv_confirmed":73,"osv_only":0,"ref":"cli-v6.49.2","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2026-10-22T18:17:01Z","removed":0,"repository":"cloudquery/cloudquery","resolved_vulnerabilities":0,"scorecard":6,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":3,"High":32,"Low":5,"Medium":27,"Negligible":0,"Unknown":6},"workflow":{"High":14,"Low":20,"Medium":3,"files":60}},{"added":0,"category":"SBOM Generation","change_any":false,"commit":"e0078793c05291a4cb4dc890d8f8f7769180beab","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":329,"errors":[],"fixable":13,"go_version":null,"id":"CycloneDX__cdxgen","in_binary":null,"integrity_drift":0,"name":"cdxgen","new_vulnerabilities":0,"osv_confirmed":13,"osv_only":0,"ref":"v13.6.0","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2026-10-31T09:35:36Z","removed":0,"repository":"CycloneDX/cdxgen","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":4,"Low":2,"Medium":6,"Negligible":0,"Unknown":0},"workflow":{"High":1,"Low":30,"Medium":0,"files":27}},{"added":0,"category":"SBOM Generation","change_any":false,"commit":"b3cfa4b0edc356dad07e0b6e7ab6da0a94af0246","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":5,"errors":[],"fixable":0,"go_version":null,"id":"CycloneDX__cyclonedx-cli","in_binary":null,"integrity_drift":0,"name":"cyclonedx-cli","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":3,"ref":"v0.33.1","ref_kind":"release","release_changed":false,"release_integrity":"none","released_at":"2026-07-23T19:48:51Z","removed":0,"repository":"CycloneDX/cyclonedx-cli","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":21,"Low":0,"Medium":11,"files":2}},{"added":0,"category":"Software Composition Analysis (SCA)","change_any":false,"commit":"e6c887c0207baeec1f1346e28bf90000b4b45eda","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":212,"errors":[],"fixable":0,"go_version":null,"id":"DependencyTrack__dependency-track","in_binary":null,"integrity_drift":0,"name":"dependency-track","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"5.2.1","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-10-25T11:13:32Z","removed":0,"repository":"DependencyTrack/dependency-track","resolved_vulnerabilities":0,"scorecard":7.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":0,"Low":0,"Medium":0,"files":15}},{"added":0,"category":"Software Composition Analysis (SCA)","change_any":false,"commit":"acc6bd257b9850e22a604ea96815476a83e7a15a","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":44,"errors":[],"fixable":27,"go_version":"go1.23.1","id":"devops-kung-fu__bomber","in_binary":{"dependencies":18,"stdlib":65,"total":83},"integrity_drift":0,"name":"bomber","new_vulnerabilities":0,"osv_confirmed":27,"osv_only":0,"ref":"v0.5.1","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2024-09-23T16:09:01Z","removed":0,"repository":"devops-kung-fu/bomber","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":13,"Low":1,"Medium":10,"Negligible":0,"Unknown":2},"workflow":{"High":7,"Low":0,"Medium":1,"files":2}},{"added":0,"category":"Container Security \u203a Image Scanning","change_any":false,"commit":"ba0b402ea56aafbb9a56f09cc13ee629160c58b6","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":6,"errors":[],"fixable":0,"go_version":null,"id":"docker__docker-bench-security","in_binary":null,"integrity_drift":0,"name":"docker-bench-security","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"v1.6.1","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2023-12-20T14:44:16Z","removed":0,"repository":"docker/docker-bench-security","resolved_vulnerabilities":0,"scorecard":6.7,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":1,"Low":2,"Medium":0,"files":2}},{"added":0,"category":"Container Security \u203a Runtime Security","change_any":false,"commit":"51eaa36112c79833fe90e51daa0564fb406f75df","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":665,"errors":[],"fixable":118,"go_version":null,"id":"draios__sysdig-inspect","in_binary":null,"integrity_drift":0,"name":"sysdig-inspect","new_vulnerabilities":0,"osv_confirmed":117,"osv_only":100,"ref":"0.12.1","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-07-17T18:36:32Z","removed":0,"repository":"draios/sysdig-inspect","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":10,"High":60,"Low":17,"Medium":31,"Negligible":0,"Unknown":0},"workflow":{"High":17,"Low":0,"Medium":3,"files":2}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a JavaScript/Node.js","change_any":false,"commit":"7c5b9cd51a70862b598d6125e50aae8af885d963","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":7,"errors":[],"fixable":0,"go_version":null,"id":"eslint-community__eslint-plugin-security","in_binary":null,"integrity_drift":0,"name":"eslint-plugin-security","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":66,"ref":"eslint-plugin-security-v4.2.1","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-10-30T08:48:41Z","removed":0,"repository":"eslint-community/eslint-plugin-security","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":9,"Low":1,"Medium":0,"files":3}},{"added":0,"category":"Secret Management","change_any":false,"commit":"e932f3a3f6f274e8e269c01aa1f5fb3d1322e3c9","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":529,"errors":[],"fixable":12,"go_version":null,"id":"external-secrets__external-secrets","in_binary":null,"integrity_drift":0,"name":"external-secrets","new_vulnerabilities":0,"osv_confirmed":9,"osv_only":8,"ref":"v2.14.0","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-10-23T15:06:48Z","removed":0,"repository":"external-secrets/external-secrets","resolved_vulnerabilities":0,"scorecard":8.3,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":5,"Low":2,"Medium":2,"Negligible":0,"Unknown":3},"workflow":{"High":16,"Low":0,"Medium":0,"files":28}},{"added":0,"category":"Kubernetes Security","change_any":false,"commit":"c84bb2ea3674ee7ec044584db8c9cc9e8d17bdd0","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":81,"errors":[],"fixable":8,"go_version":"go1.27.1","id":"FairwindsOps__polaris","in_binary":{"dependencies":5,"stdlib":11,"total":16},"integrity_drift":0,"name":"polaris","new_vulnerabilities":0,"osv_confirmed":8,"osv_only":0,"ref":"v10.2.5","ref_kind":"release","release_changed":false,"release_integrity":"signed","released_at":"2026-09-18T14:39:52Z","removed":0,"repository":"FairwindsOps/polaris","resolved_vulnerabilities":0,"scorecard":5.1,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":5,"Low":0,"Medium":0,"Negligible":0,"Unknown":2},"workflow":{"High":5,"Low":1,"Medium":3,"files":3}},{"added":0,"category":"Container Security \u203a Runtime Security","change_any":false,"commit":"7625e203c17c88c91fa1b1b8e2937907f22a1523","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":42,"errors":[],"fixable":0,"go_version":null,"id":"falcosecurity__falco","in_binary":null,"integrity_drift":0,"name":"falco","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"0.45.2","ref_kind":"release","release_changed":false,"release_integrity":"none","released_at":"2026-10-29T16:48:27Z","removed":0,"repository":"falcosecurity/falco","resolved_vulnerabilities":0,"scorecard":7.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":106,"Low":34,"Medium":13,"files":22}},{"added":0,"category":"Secret Management","change_any":false,"commit":"26e2f4784ca61353082c32dbd987c25eda086dc9","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":207,"errors":[],"fixable":18,"go_version":"go1.26.5","id":"getsops__sops","in_binary":{"dependencies":10,"stdlib":21,"total":31},"integrity_drift":0,"name":"sops","new_vulnerabilities":0,"osv_confirmed":19,"osv_only":1,"ref":"v3.13.3","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-07-23T05:27:57Z","removed":0,"repository":"getsops/sops","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":11,"Low":1,"Medium":3,"Negligible":0,"Unknown":3},"workflow":{"High":3,"Low":0,"Medium":0,"files":5}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Multi-language","change_any":false,"commit":"950734fc80d48083479843e2284039832eaf54c7","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":543,"errors":[],"fixable":58,"go_version":null,"id":"github__codeql","in_binary":null,"integrity_drift":0,"name":"codeql","new_vulnerabilities":0,"osv_confirmed":53,"osv_only":100,"ref":"main","ref_kind":"default-branch","release_changed":false,"release_integrity":null,"released_at":null,"removed":0,"repository":"github/codeql","resolved_vulnerabilities":0,"scorecard":5.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":2,"High":21,"Low":1,"Medium":30,"Negligible":0,"Unknown":4},"workflow":{"High":165,"Low":31,"Medium":1,"files":69}},{"added":0,"category":"Pre-commit & Secrets Detection","change_any":false,"commit":"83d9cd684c87d95d656c1458ef04895a7f1cbd8e","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":83,"errors":[],"fixable":25,"go_version":"go1.24.11","id":"gitleaks__gitleaks","in_binary":{"dependencies":24,"stdlib":46,"total":70},"integrity_drift":0,"name":"gitleaks","new_vulnerabilities":0,"osv_confirmed":26,"osv_only":0,"ref":"v8.30.1","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2026-03-21T02:17:58Z","removed":0,"repository":"gitleaks/gitleaks","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":7,"High":9,"Low":1,"Medium":8,"Negligible":0,"Unknown":1},"workflow":{"High":5,"Low":0,"Medium":2,"files":3}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a Go","change_any":false,"commit":"d1f380186385b4f64e00313f31743df8e4b89a77","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":8,"errors":[],"fixable":3,"go_version":null,"id":"golang__vuln","in_binary":null,"integrity_drift":0,"name":"govulncheck","new_vulnerabilities":0,"osv_confirmed":3,"osv_only":0,"ref":"v1.1.4","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2025-01-13T17:14:20Z","removed":0,"repository":"golang/vuln","resolved_vulnerabilities":0,"scorecard":3.7,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":2,"Low":1,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":0,"Low":0,"Medium":0,"files":0}},{"added":0,"category":"Container Security \u203a Image Scanning","change_any":false,"commit":"54368575d2a0c34a82fb05c904b8207284a64891","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":101,"errors":[],"fixable":35,"go_version":"go1.22.10","id":"goodwithtech__dockle","in_binary":{"dependencies":10,"stdlib":66,"total":76},"integrity_drift":0,"name":"dockle","new_vulnerabilities":0,"osv_confirmed":42,"osv_only":2,"ref":"v0.4.15","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2025-01-06T06:08:16Z","removed":0,"repository":"goodwithtech/dockle","resolved_vulnerabilities":0,"scorecard":4.1,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":9,"High":18,"Low":2,"Medium":12,"Negligible":0,"Unknown":1},"workflow":{"High":8,"Low":0,"Medium":3,"files":2}},{"added":0,"category":"Software Composition Analysis (SCA)","change_any":false,"commit":"bfe2f84abd2f09fe0b83ba7f6dad40d296762f40","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":238,"errors":[],"fixable":2,"go_version":"go1.27.0","id":"google__osv-scanner","in_binary":{"dependencies":3,"stdlib":13,"total":16},"integrity_drift":0,"name":"osv-scanner","new_vulnerabilities":0,"osv_confirmed":3,"osv_only":0,"ref":"v2.7.0","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-12T01:32:07Z","removed":0,"repository":"google/osv-scanner","resolved_vulnerabilities":0,"scorecard":8.6,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":3},"workflow":{"High":5,"Low":6,"Medium":0,"files":24}},{"added":0,"category":"Container Security \u203a Image Scanning","change_any":false,"commit":"2eece55955ced00200be9729e9728cb7dacca505","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":17,"errors":[],"fixable":0,"go_version":null,"id":"hadolint__hadolint","in_binary":null,"integrity_drift":0,"name":"hadolint","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"v2.15.1","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-07-31T10:13:06Z","removed":0,"repository":"hadolint/hadolint","resolved_vulnerabilities":0,"scorecard":4.7,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":47,"Low":0,"Medium":5,"files":5}},{"added":0,"category":"Secret Management","change_any":false,"commit":"0e7c41b936218bd2401ab0f891c93bec10e2e8e4","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":651,"errors":[],"fixable":19,"go_version":null,"id":"hashicorp__vault","in_binary":null,"integrity_drift":0,"name":"vault","new_vulnerabilities":0,"osv_confirmed":24,"osv_only":100,"ref":"v2.2.1","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-10-22T21:59:36Z","removed":0,"repository":"hashicorp/vault","resolved_vulnerabilities":0,"scorecard":6.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":12,"Low":0,"Medium":9,"Negligible":0,"Unknown":4},"workflow":{"High":205,"Low":100,"Medium":39,"files":51}},{"added":0,"category":"Supply Chain Compliance","change_any":false,"commit":"c82fe5d21aaa61c7f1a213db20a46f10bb3f411a","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":22,"errors":[],"fixable":5,"go_version":null,"id":"in-toto__in-toto","in_binary":null,"integrity_drift":0,"name":"in-toto","new_vulnerabilities":0,"osv_confirmed":4,"osv_only":0,"ref":"v3.1.0","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-05-04T16:20:30Z","removed":0,"repository":"in-toto/in-toto","resolved_vulnerabilities":0,"scorecard":6.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":3,"Low":0,"Medium":1,"Negligible":0,"Unknown":0},"workflow":{"High":4,"Low":2,"Medium":0,"files":3}},{"added":0,"category":"Secret Management","change_any":false,"commit":"5c13a7ad8de9e6ccf64e18e46e3113af22697fcc","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":2041,"errors":[],"fixable":261,"go_version":null,"id":"Infisical__infisical","in_binary":null,"integrity_drift":0,"name":"infisical","new_vulnerabilities":0,"osv_confirmed":270,"osv_only":100,"ref":"v0.167.4","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-10-26T20:03:31Z","removed":0,"repository":"Infisical/infisical","resolved_vulnerabilities":0,"scorecard":6.9,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":5,"High":103,"Low":26,"Medium":130,"Negligible":0,"Unknown":6},"workflow":{"High":24,"Low":12,"Medium":44,"files":31}},{"added":0,"category":"Kubernetes Security","change_any":false,"commit":"254e33777f12c729132b2d78d549a2ff9c881cec","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":644,"errors":[],"fixable":11,"go_version":"go1.26.9","id":"kubescape__kubescape","in_binary":{"dependencies":11,"stdlib":1,"total":12},"integrity_drift":0,"name":"kubescape","new_vulnerabilities":0,"osv_confirmed":19,"osv_only":4,"ref":"v4.0.17","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-28T10:29:34Z","removed":0,"repository":"kubescape/kubescape","resolved_vulnerabilities":0,"scorecard":7.6,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":9,"Low":0,"Medium":5,"Negligible":0,"Unknown":4},"workflow":{"High":1,"Low":4,"Medium":2,"files":7}},{"added":0,"category":"Kubernetes Security","change_any":false,"commit":"2a082d0896bcd990b54b7338a1e69acde6c5c929","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":606,"errors":[],"fixable":71,"go_version":"go1.26.6","id":"kubestellar__console","in_binary":{"dependencies":3,"stdlib":13,"total":16},"integrity_drift":0,"name":"KubeStellar Console","new_vulnerabilities":0,"osv_confirmed":72,"osv_only":28,"ref":"v0.3.42","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-09-20T08:15:03Z","removed":0,"repository":"kubestellar/console","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":4,"High":26,"Low":12,"Medium":28,"Negligible":0,"Unknown":2},"workflow":{"High":19,"Low":11,"Medium":7,"files":97}},{"added":0,"category":"Kubernetes Security","change_any":false,"commit":"e63308f1e16c05cd009ac4864be6ec25c66b49be","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":491,"errors":[],"fixable":10,"go_version":"go1.26.9","id":"kyverno__kyverno","in_binary":{"dependencies":5,"stdlib":1,"total":6},"integrity_drift":0,"name":"kyverno","new_vulnerabilities":0,"osv_confirmed":12,"osv_only":0,"ref":"v1.19.2","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-20T23:50:19Z","removed":0,"repository":"kyverno/kyverno","resolved_vulnerabilities":0,"scorecard":7.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":2,"Low":3,"Medium":3,"Negligible":0,"Unknown":4},"workflow":{"High":54,"Low":169,"Medium":2,"files":62}},{"added":0,"category":"Cloud Security","change_any":false,"commit":"66ead780c590c2db63947286fa8d5131f44697f8","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":262,"errors":[],"fixable":22,"go_version":null,"id":"lyft__cartography","in_binary":null,"integrity_drift":0,"name":"cartography","new_vulnerabilities":0,"osv_confirmed":22,"osv_only":0,"ref":"0.144.0","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-10-29T20:05:46Z","removed":0,"repository":"lyft/cartography","resolved_vulnerabilities":0,"scorecard":8.1,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":6,"Low":5,"Medium":11,"Negligible":0,"Unknown":0},"workflow":{"High":0,"Low":0,"Medium":0,"files":6}},{"added":0,"category":"SBOM Generation","change_any":false,"commit":"c83b43dee2dd70b4d6ba16a97cde6b43f971d9c3","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":9,"errors":[],"fixable":0,"go_version":null,"id":"microsoft__sbom-tool","in_binary":null,"integrity_drift":0,"name":"sbom-tool","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"v4.1.5","ref_kind":"release","release_changed":false,"release_integrity":"none","released_at":"2025-12-15T21:40:14Z","removed":0,"repository":"microsoft/sbom-tool","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":2,"Low":0,"Medium":0,"files":5}},{"added":0,"category":"Artifact Signing & Verification","change_any":false,"commit":"001cc919603c1dc16c6aad387c94b4209cb9c901","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":38,"errors":[],"fixable":30,"go_version":"go1.23.8","id":"notaryproject__notation","in_binary":{"dependencies":30,"stdlib":62,"total":92},"integrity_drift":0,"name":"notation","new_vulnerabilities":0,"osv_confirmed":31,"osv_only":0,"ref":"v1.3.2","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2025-04-27T03:17:42Z","removed":0,"repository":"notaryproject/notation","resolved_vulnerabilities":0,"scorecard":6.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":7,"High":11,"Low":2,"Medium":10,"Negligible":0,"Unknown":1},"workflow":{"High":1,"Low":0,"Medium":0,"files":7}},{"added":0,"category":"Policy as Code","change_any":false,"commit":"8f7ac015cb51d81992f2ffbe2b0c1451fd05d1c5","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":181,"errors":[],"fixable":10,"go_version":"go1.27.1","id":"open-policy-agent__conftest","in_binary":{"dependencies":4,"stdlib":12,"total":16},"integrity_drift":0,"name":"conftest","new_vulnerabilities":0,"osv_confirmed":11,"osv_only":21,"ref":"v0.71.1","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-06T04:53:53Z","removed":0,"repository":"open-policy-agent/conftest","resolved_vulnerabilities":0,"scorecard":7.2,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":5,"Low":0,"Medium":2,"Negligible":0,"Unknown":3},"workflow":{"High":0,"Low":0,"Medium":0,"files":3}},{"added":0,"category":"Policy as Code","change_any":false,"commit":"2d0b6ad97cf3a8b8436a00a1f4b07b3a56b92ca0","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":1296,"errors":[],"fixable":155,"go_version":"go1.26.0","id":"open-policy-agent__gatekeeper","in_binary":{"dependencies":5,"stdlib":39,"total":44},"integrity_drift":0,"name":"gatekeeper","new_vulnerabilities":0,"osv_confirmed":158,"osv_only":2,"ref":"v3.23.1","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-08-27T22:03:10Z","removed":0,"repository":"open-policy-agent/gatekeeper","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":4,"High":84,"Low":17,"Medium":50,"Negligible":0,"Unknown":3},"workflow":{"High":4,"Low":0,"Medium":6,"files":25}},{"added":0,"category":"Policy as Code","change_any":true,"commit":"d4c8d0c8812290c3e3715ca4cf958f75283f6ec4","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":156,"errors":[],"fixable":4,"go_version":"go1.27.3","id":"open-policy-agent__opa","in_binary":{"dependencies":0,"stdlib":0,"total":0},"integrity_drift":0,"name":"opa","new_vulnerabilities":0,"osv_confirmed":5,"osv_only":0,"ref":"v1.22.0","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-29T15:34:18Z","removed":0,"repository":"open-policy-agent/opa","resolved_vulnerabilities":0,"scorecard":8.2,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":2,"Low":0,"Medium":0,"Negligible":0,"Unknown":3},"workflow":{"High":1,"Low":6,"Medium":1,"files":15}},{"added":0,"category":"Supply Chain Compliance","change_any":false,"commit":"61e84743356275f6ffca23b1b2f2cb945e19eb96","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":694,"errors":[],"fixable":12,"go_version":"go1.27.2","id":"ossf__scorecard","in_binary":{"dependencies":3,"stdlib":1,"total":4},"integrity_drift":0,"name":"scorecard","new_vulnerabilities":0,"osv_confirmed":14,"osv_only":0,"ref":"v5.6.0","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-12T00:21:01Z","removed":0,"repository":"ossf/scorecard","resolved_vulnerabilities":0,"scorecard":8.6,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":5,"Low":0,"Medium":2,"Negligible":0,"Unknown":6},"workflow":{"High":4,"Low":0,"Medium":2,"files":15}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a PHP","change_any":false,"commit":"f20ce6f3c82556cfcfc086b152445a12d1d64fff","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":335,"errors":[],"fixable":0,"go_version":null,"id":"phpstan__phpstan","in_binary":null,"integrity_drift":0,"name":"phpstan","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":7,"ref":"2.3.4","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-10-28T22:40:18Z","removed":0,"repository":"phpstan/phpstan","resolved_vulnerabilities":0,"scorecard":4.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":4,"Low":3,"Medium":19,"files":29}},{"added":0,"category":"Pre-commit & Secrets Detection","change_any":false,"commit":"65bb884a567e8be6adc51e8bfbcf26f708eb35a2","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":8,"errors":[],"fixable":0,"go_version":null,"id":"pre-commit__pre-commit","in_binary":null,"integrity_drift":0,"name":"pre-commit","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"v4.7.0","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-10-13T15:35:39Z","removed":0,"repository":"pre-commit/pre-commit","resolved_vulnerabilities":0,"scorecard":4.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":9,"Low":0,"Medium":7,"files":3}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a Ruby","change_any":false,"commit":"c7781648630c789dd1a2f089e94b5d8c463169fb","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":5,"errors":[],"fixable":0,"go_version":null,"id":"presidentbeef__brakeman","in_binary":null,"integrity_drift":0,"name":"brakeman","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"v8.1.0","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-09-30T23:29:14Z","removed":0,"repository":"presidentbeef/brakeman","resolved_vulnerabilities":0,"scorecard":6,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":5,"Low":0,"Medium":1,"files":1}},{"added":0,"category":"API & Dynamic Testing (DAST)","change_any":false,"commit":"a8c88feb4a1c8e961b7902534ce3af97e9d524a4","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":441,"errors":[],"fixable":29,"go_version":"go1.26.5","id":"projectdiscovery__nuclei","in_binary":{"dependencies":14,"stdlib":21,"total":35},"integrity_drift":0,"name":"nuclei","new_vulnerabilities":0,"osv_confirmed":30,"osv_only":0,"ref":"v3.11.1","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2026-08-08T12:21:32Z","removed":0,"repository":"projectdiscovery/nuclei","resolved_vulnerabilities":0,"scorecard":6.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":19,"Low":0,"Medium":7,"Negligible":0,"Unknown":3},"workflow":{"High":76,"Low":2,"Medium":19,"files":13}},{"added":0,"category":"Cloud Security","change_any":false,"commit":"555a4cc469907e26ef007eb79af2b6cb4bddd6c6","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":2034,"errors":[],"fixable":87,"go_version":null,"id":"prowler-cloud__prowler","in_binary":null,"integrity_drift":0,"name":"prowler","new_vulnerabilities":0,"osv_confirmed":86,"osv_only":4,"ref":"5.47.0","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-10-29T14:14:59Z","removed":0,"repository":"prowler-cloud/prowler","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":22,"Low":9,"Medium":55,"Negligible":0,"Unknown":0},"workflow":{"High":1,"Low":32,"Medium":0,"files":62}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a Python","change_any":false,"commit":"92ae8b82fb422a639f0ed8d99e96cea769594e08","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":8,"errors":[],"fixable":2,"go_version":null,"id":"PyCQA__bandit","in_binary":null,"integrity_drift":0,"name":"bandit","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":1,"ref":"1.9.4","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-02-25T06:37:44Z","removed":0,"repository":"PyCQA/bandit","resolved_vulnerabilities":0,"scorecard":5.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":0,"Low":1,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":14,"Low":0,"Medium":4,"files":5}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a Python","change_any":false,"commit":"ec3368a4f8239249088b77794d414526112e6aac","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":17,"errors":[],"fixable":3,"go_version":null,"id":"pyupio__safety","in_binary":null,"integrity_drift":0,"name":"safety","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"3.8.1","ref_kind":"release","release_changed":false,"release_integrity":"none","released_at":"2026-05-29T14:09:06Z","removed":0,"repository":"pyupio/safety","resolved_vulnerabilities":0,"scorecard":4.7,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":1,"Low":1,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":46,"Low":13,"Medium":29,"files":9}},{"added":0,"category":"Container Security \u203a Image Scanning","change_any":false,"commit":"f6a412ccbfc4c3db83005348584d437348826763","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":128,"errors":[],"fixable":67,"go_version":"go1.24.10","id":"quay__clair","in_binary":{"dependencies":37,"stdlib":45,"total":82},"integrity_drift":0,"name":"clair","new_vulnerabilities":0,"osv_confirmed":74,"osv_only":0,"ref":"v4.9.0","ref_kind":"release","release_changed":false,"release_integrity":"none","released_at":"2025-12-10T18:34:49Z","removed":0,"repository":"quay/clair","resolved_vulnerabilities":0,"scorecard":5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":14,"High":34,"Low":6,"Medium":17,"Negligible":0,"Unknown":3},"workflow":{"High":69,"Low":11,"Medium":24,"files":15}},{"added":0,"category":"SBOM Generation","change_any":false,"commit":"7a43eb90ffd1d951adc1e445efd5abc0e188bfea","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":42,"errors":[],"fixable":1,"go_version":"go1.26.10","id":"rezmoss__sbomlyze","in_binary":{"dependencies":0,"stdlib":0,"total":0},"integrity_drift":0,"name":"sbomlyze","new_vulnerabilities":0,"osv_confirmed":1,"osv_only":0,"ref":"v0.6.0","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-11-01T14:40:09Z","removed":0,"repository":"rezmoss/sbomlyze","resolved_vulnerabilities":0,"scorecard":7.9,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":1,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":4,"Low":2,"Medium":0,"files":11}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a Rust","change_any":false,"commit":"281452c35cf0870969042374110f099a411bc185","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":465,"errors":[],"fixable":6,"go_version":null,"id":"RustSec__rustsec","in_binary":null,"integrity_drift":0,"name":"cargo-audit","new_vulnerabilities":0,"osv_confirmed":6,"osv_only":17,"ref":"cargo-audit/v0.22.2","ref_kind":"release","release_changed":false,"release_integrity":"none","released_at":"2026-06-05T12:38:04Z","removed":0,"repository":"RustSec/rustsec","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":1,"Low":2,"Medium":3,"Negligible":0,"Unknown":0},"workflow":{"High":2,"Low":0,"Medium":28,"files":11}},{"added":0,"category":"Software Composition Analysis (SCA)","change_any":false,"commit":"568cb0e1c90685dd89f07f91c64e97a49228a47f","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":712,"errors":[],"fixable":71,"go_version":"go1.26.2","id":"safedep__vet","in_binary":{"dependencies":24,"stdlib":34,"total":58},"integrity_drift":0,"name":"vet","new_vulnerabilities":0,"osv_confirmed":84,"osv_only":0,"ref":"v1.20.0","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-07T05:09:23Z","removed":0,"repository":"safedep/vet","resolved_vulnerabilities":0,"scorecard":7.4,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":4,"High":41,"Low":1,"Medium":35,"Negligible":0,"Unknown":3},"workflow":{"High":5,"Low":1,"Medium":0,"files":12}},{"added":0,"category":"Cloud Security","change_any":false,"commit":"75a67ea9cb6d0fdf35ff185d08dad0d45587e6f7","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":163,"errors":[],"fixable":35,"go_version":null,"id":"salesforce__cloudsplaining","in_binary":null,"integrity_drift":0,"name":"cloudsplaining","new_vulnerabilities":0,"osv_confirmed":34,"osv_only":100,"ref":"0.9.1","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-06-14T23:50:18Z","removed":0,"repository":"salesforce/cloudsplaining","resolved_vulnerabilities":0,"scorecard":5.7,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":3,"High":16,"Low":2,"Medium":15,"Negligible":0,"Unknown":0},"workflow":{"High":0,"Low":0,"Medium":1,"files":7}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a Go","change_any":false,"commit":"5eb1d104ef85ff2c905c877eb600e8c1dee33a22","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":79,"errors":[],"fixable":2,"go_version":"go1.27.3","id":"securego__gosec","in_binary":{"dependencies":0,"stdlib":0,"total":0},"integrity_drift":0,"name":"gosec","new_vulnerabilities":0,"osv_confirmed":3,"osv_only":0,"ref":"v2.30.0","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-23T09:22:19Z","removed":0,"repository":"securego/gosec","resolved_vulnerabilities":0,"scorecard":6.6,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":3},"workflow":{"High":0,"Low":1,"Medium":0,"files":5}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Multi-language","change_any":false,"commit":"4fe07d805dd2a4b64fed486e95136923f08648d0","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":215,"errors":[],"fixable":71,"go_version":null,"id":"semgrep__semgrep","in_binary":null,"integrity_drift":0,"name":"semgrep","new_vulnerabilities":0,"osv_confirmed":71,"osv_only":0,"ref":"v1.183.0","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-10-29T21:29:24Z","removed":0,"repository":"semgrep/semgrep","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":2,"High":26,"Low":13,"Medium":31,"Negligible":0,"Unknown":0},"workflow":{"High":8,"Low":4,"Medium":27,"files":13}},{"added":0,"category":"Artifact Signing & Verification","change_any":false,"commit":"0e48502cf5ef34e2e60bbd3617aa19945712f705","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":319,"errors":[],"fixable":3,"go_version":"go1.27.3","id":"sigstore__cosign","in_binary":{"dependencies":1,"stdlib":0,"total":1},"integrity_drift":0,"name":"cosign","new_vulnerabilities":0,"osv_confirmed":5,"osv_only":0,"ref":"v3.1.4","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-20T18:27:42Z","removed":0,"repository":"sigstore/cosign","resolved_vulnerabilities":0,"scorecard":8.2,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":1,"Negligible":0,"Unknown":4},"workflow":{"High":7,"Low":0,"Medium":5,"files":17}},{"added":0,"category":"Artifact Signing & Verification","change_any":false,"commit":"206912e3cf61ba3fed587896e10d4812411e6913","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":270,"errors":[],"fixable":10,"go_version":"go1.27.3","id":"sigstore__rekor","in_binary":{"dependencies":0,"stdlib":0,"total":0},"integrity_drift":0,"name":"rekor","new_vulnerabilities":0,"osv_confirmed":12,"osv_only":0,"ref":"v1.5.5","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-21T00:03:28Z","removed":0,"repository":"sigstore/rekor","resolved_vulnerabilities":0,"scorecard":8.6,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":5,"Low":0,"Medium":0,"Negligible":0,"Unknown":6},"workflow":{"High":2,"Low":0,"Medium":0,"files":9}},{"added":0,"category":"Supply Chain Compliance","change_any":false,"commit":"ea584f4502babc6f60d9bc799dbbb13c1caa9ee6","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":163,"errors":[],"fixable":87,"go_version":"go1.23.5","id":"slsa-framework__slsa-verifier","in_binary":{"dependencies":27,"stdlib":52,"total":79},"integrity_drift":0,"name":"slsa-verifier","new_vulnerabilities":0,"osv_confirmed":93,"osv_only":100,"ref":"v2.7.1","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2025-06-27T15:41:51Z","removed":0,"repository":"slsa-framework/slsa-verifier","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":9,"High":34,"Low":6,"Medium":40,"Negligible":0,"Unknown":4},"workflow":{"High":2,"Low":5,"Medium":3,"files":15}},{"added":0,"category":"Software Composition Analysis (SCA)","change_any":false,"commit":"4a83f28e6efc85722a21213b4c0071d8e14d3527","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":749,"errors":[],"fixable":19,"go_version":"go1.26.10","id":"snyk__cli","in_binary":{"dependencies":6,"stdlib":0,"total":6},"integrity_drift":0,"name":"snyk-cli","new_vulnerabilities":0,"osv_confirmed":15,"osv_only":67,"ref":"v1.1308.3","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2026-10-23T10:47:03Z","removed":0,"repository":"snyk/cli","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":8,"Low":3,"Medium":8,"Negligible":0,"Unknown":3},"workflow":{"High":38,"Low":27,"Medium":22,"files":9}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Multi-language","change_any":false,"commit":"55989c640a19aac3cb1c190f97464e59773035c5","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":3,"errors":[],"fixable":0,"go_version":null,"id":"SonarSource__sonarqube","in_binary":null,"integrity_drift":0,"name":"sonarqube","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"26.10.0.133078","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-10-12T10:01:25Z","removed":0,"repository":"SonarSource/sonarqube","resolved_vulnerabilities":0,"scorecard":4.9,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":1,"Low":0,"Medium":0,"files":1}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Multi-language","change_any":false,"commit":"6816eb256805aa6eed1dced23e6a4aea08cc6660","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":8,"errors":[],"fixable":0,"go_version":null,"id":"spotbugs__spotbugs","in_binary":null,"integrity_drift":0,"name":"spotbugs","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"4.10.5","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-10-12T03:43:33Z","removed":0,"repository":"spotbugs/spotbugs","resolved_vulnerabilities":0,"scorecard":4.6,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":6,"Low":0,"Medium":0,"files":5}},{"added":0,"category":"API & Dynamic Testing (DAST)","change_any":false,"commit":"ea8c6bdb63a3b2da1584f328836eb0d28116f7c4","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":2,"errors":[],"fixable":0,"go_version":null,"id":"sqlmapproject__sqlmap","in_binary":null,"integrity_drift":0,"name":"sqlmap","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"1.10","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-01-01T18:27:27Z","removed":0,"repository":"sqlmapproject/sqlmap","resolved_vulnerabilities":0,"scorecard":4.9,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":2,"Low":0,"Medium":1,"files":1}},{"added":0,"category":"Kubernetes Security","change_any":false,"commit":"10ae003038c81855aca8489df5e35da150f4dc2e","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":621,"errors":[],"fixable":142,"go_version":"go1.26.1","id":"stackrox__kube-linter","in_binary":{"dependencies":42,"stdlib":40,"total":82},"integrity_drift":0,"name":"kube-linter","new_vulnerabilities":0,"osv_confirmed":157,"osv_only":2,"ref":"v0.8.3","ref_kind":"release","release_changed":false,"release_integrity":"signed","released_at":"2026-03-10T13:17:40Z","removed":0,"repository":"stackrox/kube-linter","resolved_vulnerabilities":0,"scorecard":7.4,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":20,"High":58,"Low":12,"Medium":60,"Negligible":0,"Unknown":7},"workflow":{"High":21,"Low":0,"Medium":4,"files":3}},{"added":0,"category":"API & Dynamic Testing (DAST)","change_any":false,"commit":"d201dac320fc5187eac75e723dd07a716196ec5a","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":5,"errors":[],"fixable":0,"go_version":null,"id":"sullo__nikto","in_binary":null,"integrity_drift":0,"name":"nikto","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"2.6.1","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2026-07-31T16:17:55Z","removed":0,"repository":"sullo/nikto","resolved_vulnerabilities":0,"scorecard":3.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":7,"Low":0,"Medium":0,"files":2}},{"added":0,"category":"Pre-commit & Secrets Detection","change_any":false,"commit":"12fab7055d7e640d5dae43209bafc48bf5ef1fd7","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":35,"errors":[],"fixable":3,"go_version":"go1.24.2","id":"thoughtworks__talisman","in_binary":{"dependencies":2,"stdlib":63,"total":65},"integrity_drift":0,"name":"talisman","new_vulnerabilities":0,"osv_confirmed":3,"osv_only":0,"ref":"v1.37.0","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2025-05-02T15:05:57Z","removed":0,"repository":"thoughtworks/talisman","resolved_vulnerabilities":0,"scorecard":3.3,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":2,"Low":1,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":13,"Low":0,"Medium":1,"files":4}},{"added":0,"category":"Pre-commit & Secrets Detection","change_any":false,"commit":"31ce31ee1abbcc7dc8eee5764c17121c3044c8b2","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":335,"errors":[],"fixable":5,"go_version":null,"id":"trufflesecurity__trufflehog","in_binary":null,"integrity_drift":0,"name":"trufflehog","new_vulnerabilities":0,"osv_confirmed":12,"osv_only":0,"ref":"v3.99.7","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-24T06:04:25Z","removed":0,"repository":"trufflesecurity/trufflehog","resolved_vulnerabilities":0,"scorecard":7.9,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":4,"Low":0,"Medium":5,"Negligible":0,"Unknown":3},"workflow":{"High":3,"Low":1,"Medium":2,"files":11}},{"added":0,"category":"Cloud Security","change_any":false,"commit":"4269e1dc4865647605da6af8f1828e77278106a0","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":229,"errors":[],"fixable":15,"go_version":"go1.26.10","id":"turbot__steampipe","in_binary":{"dependencies":12,"stdlib":0,"total":12},"integrity_drift":0,"name":"steampipe","new_vulnerabilities":0,"osv_confirmed":20,"osv_only":2,"ref":"v2.4.9","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-11-01T12:48:24Z","removed":0,"repository":"turbot/steampipe","resolved_vulnerabilities":0,"scorecard":6.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":3,"High":9,"Low":3,"Medium":2,"Negligible":0,"Unknown":3},"workflow":{"High":14,"Low":9,"Medium":1,"files":7}},{"added":0,"category":"Static Application Security Testing (SAST) \u203a Language-specific \u203a PHP","change_any":false,"commit":"e447b655502f2058630e6ee03f2ea1c3789fe166","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":68,"errors":[],"fixable":1,"go_version":null,"id":"vimeo__psalm","in_binary":null,"integrity_drift":0,"name":"psalm","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"6.20.5","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-10-31T16:27:00Z","removed":0,"repository":"vimeo/psalm","resolved_vulnerabilities":0,"scorecard":4.7,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":1,"Negligible":0,"Unknown":0},"workflow":{"High":1,"Low":0,"Medium":3,"files":13}},{"added":0,"category":"Container Security \u203a Image Scanning","change_any":false,"commit":"fe98c8a2eb08c443a36e3cc7568078909e298433","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":79,"errors":[],"fixable":32,"go_version":"go1.24.1","id":"wagoodman__dive","in_binary":{"dependencies":22,"stdlib":64,"total":86},"integrity_drift":0,"name":"dive","new_vulnerabilities":0,"osv_confirmed":36,"osv_only":0,"ref":"v0.13.1","ref_kind":"release","release_changed":false,"release_integrity":"checksums-only","released_at":"2025-03-29T15:29:08Z","removed":0,"repository":"wagoodman/dive","resolved_vulnerabilities":0,"scorecard":3.4,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":1,"High":17,"Low":3,"Medium":14,"Negligible":0,"Unknown":2},"workflow":{"High":28,"Low":4,"Medium":9,"files":3}},{"added":0,"category":"API & Dynamic Testing (DAST)","change_any":false,"commit":"594fa4908cfd9f9e46d3becdce0eb0b2a9d75bed","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":5,"errors":[],"fixable":0,"go_version":null,"id":"wapiti-scanner__wapiti","in_binary":null,"integrity_drift":0,"name":"wapiti","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"3.3.2","ref_kind":"release","release_changed":false,"release_integrity":"no-linux-binary","released_at":"2026-08-19T08:28:10Z","removed":0,"repository":"wapiti-scanner/wapiti","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":10,"Low":0,"Medium":5,"files":1}},{"added":0,"category":"Pre-commit & Secrets Detection","change_any":false,"commit":"01886c8a910c64595c47f186ca1ffc0b77fa5458","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":46,"errors":[],"fixable":42,"go_version":null,"id":"Yelp__detect-secrets","in_binary":null,"integrity_drift":0,"name":"detect-secrets","new_vulnerabilities":0,"osv_confirmed":40,"osv_only":4,"ref":"v1.5.0","ref_kind":"release","release_changed":false,"release_integrity":"no-assets","released_at":"2024-05-06T18:05:06Z","removed":0,"repository":"Yelp/detect-secrets","resolved_vulnerabilities":0,"scorecard":3.5,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":2,"High":16,"Low":5,"Medium":19,"Negligible":0,"Unknown":0},"workflow":{"High":7,"Low":0,"Medium":4,"files":2}},{"added":0,"category":"API & Dynamic Testing (DAST)","change_any":false,"commit":"8a1bff313f4d183dba5aa154ecbe89ad751c9153","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":18,"errors":[],"fixable":0,"go_version":null,"id":"zaproxy__zaproxy","in_binary":null,"integrity_drift":0,"name":"zap","new_vulnerabilities":0,"osv_confirmed":0,"osv_only":0,"ref":"v2.17.0","ref_kind":"release","release_changed":false,"release_integrity":"none","released_at":"2025-12-15T14:41:51Z","removed":0,"repository":"zaproxy/zaproxy","resolved_vulnerabilities":0,"scorecard":6.8,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":0,"Medium":0,"Negligible":0,"Unknown":0},"workflow":{"High":36,"Low":0,"Medium":18,"files":19}},{"added":0,"category":"Infrastructure as Code Security","change_any":false,"commit":"effdb35fa7868863f11655db256d9008922fa427","compliance":{"bsi_tr03183":{"failed_checks":["Component Creator","Distribution Licences","SHA-512 Hash","Dependency Relationship","SBOM Creator Contact"],"passed":4,"score":44,"total":9},"cisa":{"failed_checks":["Software Producer","Dependency Relationship","License Information","Component Hash","SBOM Author"],"passed":5,"score":50,"total":10},"ntia":{"failed_checks":["Supplier Name","Dependency Relationship"],"passed":5,"score":71,"total":7}},"date":"2026-11-01","dependencies":494,"errors":[],"fixable":4,"go_version":null,"id":"zizmorcore__zizmor","in_binary":null,"integrity_drift":0,"name":"zizmor","new_vulnerabilities":0,"osv_confirmed":4,"osv_only":11,"ref":"v1.31.1","ref_kind":"release","release_changed":false,"release_integrity":"verified","released_at":"2026-10-15T23:16:39Z","removed":0,"repository":"zizmorcore/zizmor","resolved_vulnerabilities":0,"scorecard":null,"stale":false,"upgraded":0,"vulnerabilities":{"Critical":0,"High":0,"Low":2,"Medium":2,"Negligible":0,"Unknown":0},"workflow":{"High":10,"Low":4,"Medium":1,"files":28}}],"schema_version":1,"tools":{"cosign":"3.1.4","govulncheck":"1.9.0","grype":"0.121.0","grype_db_built":"2026-11-01T06:20:12Z","osv-scanner":"2.7.0","sbomlyze":"0.6.0","scorecard":"5.6.0","slsa-verifier":"2.7.1","syft":"1.55.0","zizmor":"1.31.1"}}