vault
Manage secrets, encryption, and privileged access
650
declared dependencies
0 / 12
critical / high advisories
19
advisories with a fixed version
6.5
OpenSSF Scorecard (of 10); OpenSSF public dataset
no release files
release verification
Changes since last week
1 removed.
Removed (1)
sqlc-dev/setup-sqlc@v5.0.0
Known vulnerabilities (25)
Vulnerabilities are known advisories that Grype matches against the dependencies declared in each project's release source (manifests and lockfiles, including development and build dependencies). A match does not mean the tool is exploitable: the vulnerable code may be unused, test-only, or not shipped in the released binary. OSV: also reported by OSV-Scanner. Released binary: for Go tools, whether govulncheck found the vulnerable code in the shipped Linux binary. KEV: listed in the CISA Known Exploited Vulnerabilities catalog. EPSS: FIRST's estimated probability of exploitation in the next 30 days. Both describe the vulnerability in general, not its exploitability through this tool; a match in a workflow file refers to a GitHub Action, not to shipped code. Select an advisory for every catalog tool it matches. If a match is wrong or does not apply, use Dispute; accepted disputes are annotated here and listed on the corrections page, and the match stays visible.
| Severity | Advisory | Package | Version | Fixed in | OSV | Released binary | KEV | EPSS | Declared in | Dispute |
|---|---|---|---|---|---|---|---|---|---|---|
| High | GHSA-mgcc-cww5-fp2q sourceCVE-2026-116587 | github.com/go-jose/go-jose/v3golang | v3.0.5 | no fix listed | ✓ | — | no | 0.4% | go.mod | Dispute |
| High | GHSA-mgcc-cww5-fp2q sourceCVE-2026-116587 | github.com/go-jose/go-jose/v4golang | v4.1.5 | 4.1.6 | ✓ | — | no | 0.4% | api/auth/azure/go.mod | Dispute |
| High | GHSA-5588-rp99-5fjh sourceCVE-2026-113729 | github.com/moov-io/signedxmlgolang | v1.1.1 | 1.4.1 | — | — | no | 0.5% | go.mod | Dispute |
| High | GHSA-2j4c-ffch-9f23 sourceCVE-2026-107214 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260915055537-22f76f9acb94 | ✓ | — | no | 0.2% | tools/pipeline/go.mod | Dispute |
| High | GHSA-c85p-xxjj-2r75 sourceCVE-2026-107217 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260910071107-696050fbf14e | ✓ | — | no | 0.4% | tools/pipeline/go.mod | Dispute |
| High | GHSA-fq3v-74gv-27gm sourceCVE-2026-107223 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260807015645-a54c578af309 | ✓ | — | no | 0.4% | tools/pipeline/go.mod | Dispute |
| High | GHSA-jrfj-fhj2-jjvm sourceCVE-2026-107219 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260906004932-2badfcd5841d | ✓ | — | no | 0.4% | tools/pipeline/go.mod | Dispute |
| High | GHSA-jw42-f3rr-4cc3 sourceCVE-2026-107212 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260930021559-01a9ff32fb3c | ✓ | — | no | 0.4% | tools/pipeline/go.mod | Dispute |
| High | GHSA-mx22-3794-2vpv sourceCVE-2026-107211 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20261003002531-6258dcebc4e2 | ✓ | — | no | 0.2% | tools/pipeline/go.mod | Dispute |
| High | GHSA-r7x5-4969-99p7 sourceCVE-2026-107213 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260929015830-8ffeb07ec9a3 | ✓ | — | no | 0.2% | tools/pipeline/go.mod | Dispute |
| High | GHSA-wp2g-vpjj-g53r sourceCVE-2026-107216 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260911060113-ea12859e43c6 | ✓ | — | no | 0.4% | tools/pipeline/go.mod | Dispute |
| High | GHSA-x2q3-8cjh-766f sourceCVE-2026-107215 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260912113515-5f636f9dcde5 | ✓ | — | no | 0.2% | tools/pipeline/go.mod | Dispute |
| Medium | GHSA-4w3g-jfj2-cw2q sourceCVE-2026-116585 | github.com/go-jose/go-jose/v3golang | v3.0.5 | no fix listed | ✓ | — | no | 0.3% | go.mod | Dispute |
| Medium | GHSA-vvm8-gf78-28g4 sourceCVE-2026-116586 | github.com/go-jose/go-jose/v3golang | v3.0.5 | no fix listed | ✓ | — | no | 0.3% | go.mod | Dispute |
| Medium | GHSA-qqj6-54q6-cxv6 sourceCVE-2026-86597 | github.com/snowflakedb/gosnowflakegolang | v1.19.0 | no fix listed | ✓ | — | no | 0.1% | go.mod | Dispute |
| Medium | GHSA-5h23-36rv-pm65 sourceCVE-2026-107225 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260731010303-ae2113b410e5 | ✓ | — | no | 0.3% | tools/pipeline/go.mod | Dispute |
| Medium | GHSA-8jjq-8j9w-m2v6 sourceCVE-2026-107218 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260908032718-ecd99d761fe0 | ✓ | — | no | 0.3% | tools/pipeline/go.mod | Dispute |
| Medium | GHSA-8mcq-6wmr-jrjv sourceCVE-2026-107221 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260816084418-46a5eb289448 | ✓ | — | no | 0.3% | tools/pipeline/go.mod | Dispute |
| Medium | GHSA-fw94-4wwp-w8pw sourceCVE-2026-107224 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260805032953-db93f8d89de7 | ✓ | — | no | 0.3% | tools/pipeline/go.mod | Dispute |
| Medium | GHSA-g27h-8qhm-6pff sourceCVE-2026-107220 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260820023833-99903a3240e5 | ✓ | — | no | 0.3% | tools/pipeline/go.mod | Dispute |
| Medium | GHSA-rxcj-4pj5-74gr sourceCVE-2026-107222 | github.com/xuri/excelize/v2golang | v2.11.0 | 2.11.1-0.20260812075026-be7a16390fa6 | ✓ | — | no | 0.3% | tools/pipeline/go.mod | Dispute |
| Unknown | GO-2026-5932 source | golang.org/x/cryptogolang | v0.57.0 | no fix listed | ✓ | — | no | — | api/auth/gcp/go.mod | Dispute |
| Unknown | GO-2026-5932 source | golang.org/x/cryptogolang | v0.58.0 | no fix listed | ✓ | — | no | — | go.mod | Dispute |
| Unknown | GO-2026-6860 sourceCVE-2026-78661 | golang.org/x/netgolang | v0.60.0 | 0.62.0 | ✓ | — | no | 0.2% | api/auth/approle/go.mod | Dispute |
| Unknown | GO-2026-6866 sourceCVE-2026-97045 | golang.org/x/netgolang | v0.60.0 | 0.62.0 | ✓ | — | no | 0.2% | tools/pipeline/go.mod | Dispute |
Second opinion: OSV-Scanner
OSV-Scanner found 189 advisories in the same files; 24 of Grype's matches are confirmed by it (marked ✓ above). 100 advisories were reported only by OSV-Scanner.
Reported only by OSV-Scanner (100)
| Advisory | Package | Version | Severity |
|---|---|---|---|
CVE-2026-12681, GHSA-9r4w-jg96-92mv, GO-2026-5298 | github.com/google/go-attestation | 0.6.4 | Unknown |
CVE-2026-12681, GHSA-9r4w-jg96-92mv, GO-2026-5298 | github.com/google/go-attestation | 0.6.4 | Unknown |
CVE-2026-12681, GHSA-9r4w-jg96-92mv, GO-2026-5298 | github.com/google/go-attestation | 0.6.4 | Unknown |
CVE-2026-49356, GHSA-4x5r-pxfx-6jf8 | @babel/core | 7.26.10 | Low |
CVE-2026-83608, GHSA-27p8-2357-5qqv | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83609, GHSA-3px3-54cx-rmw9 | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83605, GHSA-4w3w-2rp5-g8jm | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83610, GHSA-6gmq-8vp8-gcm6 | @xmldom/xmldom | 0.9.10 | Medium |
CVE-2026-83611, GHSA-6h8r-xr42-gp59 | @xmldom/xmldom | 0.9.10 | Medium |
CVE-2026-83612, GHSA-6mj3-qw4j-hgrw | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83613, GHSA-8344-3jmq-59r6 | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83614, GHSA-93r5-fhx6-vmg9 | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83615, GHSA-965w-775f-mr7g | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83616, GHSA-c7q8-3ch8-vqpv | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83606, GHSA-g53g-w8rj-fmg7 | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83618, GHSA-vr34-hp96-76pp | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-83607, GHSA-w2rr-34g9-rvrj | @xmldom/xmldom | 0.9.10 | High |
CVE-2026-45819, GHSA-w5vr-8v7q-w6rv | baseline-browser-mapping | 2.10.32 | Medium |
CVE-2026-111181, GHSA-27r3-jxmh-p828 | body-parser | 1.20.5 | High |
CVE-2026-12590, GHSA-v422-hmwv-36x6 | body-parser | 1.20.5 | Low |
CVE-2026-111181, GHSA-27r3-jxmh-p828 | body-parser | 2.2.2 | High |
CVE-2026-12590, GHSA-v422-hmwv-36x6 | body-parser | 2.2.2 | Low |
CVE-2026-13149, GHSA-3jxr-9vmj-r5cp | brace-expansion | 1.1.15 | High |
CVE-2026-102276, GHSA-6j4f-fj2g-mc7p | brace-expansion | 1.1.15 | High |
CVE-2026-14257, GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.15 | High |
CVE-2026-102277, GHSA-q2hr-2g5m-vwhr | brace-expansion | 1.1.15 | Medium |
CVE-2026-102278, GHSA-qhr7-859c-m2p7 | brace-expansion | 1.1.15 | High |
CVE-2026-69152, GHSA-rgw5-rvv9-x895 | brace-expansion | 1.1.15 | High |
CVE-2026-13149, GHSA-3jxr-9vmj-r5cp | brace-expansion | 2.1.1 | High |
CVE-2026-102276, GHSA-6j4f-fj2g-mc7p | brace-expansion | 2.1.1 | High |
CVE-2026-14257, GHSA-mh99-v99m-4gvg | brace-expansion | 2.1.1 | High |
CVE-2026-102277, GHSA-q2hr-2g5m-vwhr | brace-expansion | 2.1.1 | Medium |
CVE-2026-102278, GHSA-qhr7-859c-m2p7 | brace-expansion | 2.1.1 | High |
CVE-2026-69152, GHSA-rgw5-rvv9-x895 | brace-expansion | 2.1.1 | High |
CVE-2026-13149, GHSA-3jxr-9vmj-r5cp | brace-expansion | 5.0.6 | High |
CVE-2026-102276, GHSA-6j4f-fj2g-mc7p | brace-expansion | 5.0.6 | High |
CVE-2026-14257, GHSA-mh99-v99m-4gvg | brace-expansion | 5.0.6 | High |
CVE-2026-102277, GHSA-q2hr-2g5m-vwhr | brace-expansion | 5.0.6 | Medium |
CVE-2026-102278, GHSA-qhr7-859c-m2p7 | brace-expansion | 5.0.6 | High |
CVE-2026-69152, GHSA-rgw5-rvv9-x895 | brace-expansion | 5.0.6 | High |
CVE-2026-73088, GHSA-73wf-gq98-2v4g | browserslist | 4.28.2 | High |
CVE-2026-73089, GHSA-c83g-rgw3-j3cx | browserslist | 4.28.2 | High |
CVE-2026-85062, GHSA-2wm5-q62r-hmrv | colord | 2.9.3 | Medium |
CVE-2026-87776, GHSA-vc2v-76pw-4v95 | compression | 1.8.1 | High |
CVE-2026-24001, GHSA-73rr-hh4g-fpgx | diff | 7.0.0 | Low |
CVE-2026-109345, GHSA-6688-9rhm-gjv2 | dompurify | 3.4.15 | Unknown |
CVE-2026-116802, GHSA-c6gr-qvv4-5v3f | dompurify | 3.4.15 | Unknown |
CVE-2026-116804, GHSA-cg2g-xh64-v4q7 | dompurify | 3.4.15 | Critical |
CVE-2026-116803, GHSA-mrv2-3pqr-j5jr | dompurify | 3.4.15 | High |
CVE-2026-109344, GHSA-p98j-92pf-mc4p | dompurify | 3.4.15 | Low |
CVE-2026-102599, GHSA-2gc4-cqfq-p2gv | engine.io | 6.6.8 | High |
CVE-2026-110725, GHSA-333x-w4r6-6crp | fast-uri | 3.1.2 | Low |
CVE-2026-13676, GHSA-4c8g-83qw-93j6 | fast-uri | 3.1.2 | High |
CVE-2026-18446, GHSA-7p8r-x3mc-p8w7 | fast-uri | 3.1.2 | High |
CVE-2026-75975, GHSA-f65p-4m7j-42xc | fast-uri | 3.1.2 | High |
CVE-2026-75899, GHSA-fph4-wmhf-6fwf | fast-uri | 3.1.2 | High |
CVE-2026-86472, GHSA-hrr3-gc8f-f4qj | fast-uri | 3.1.2 | Medium |
CVE-2026-76172, GHSA-jqff-g426-hqxp | fast-uri | 3.1.2 | High |
CVE-2026-84292, GHSA-qw65-cvwx-89v3 | fast-uri | 3.1.2 | High |
CVE-2026-16221, GHSA-v2hh-gcrm-f6hx | fast-uri | 3.1.2 | High |
CVE-2026-110306, GHSA-w74x-v6f9-j3xg | fast-uri | 3.1.2 | Medium |
CVE-2026-110095, GHSA-xhq7-xmqj-769h | fast-uri | 3.1.2 | Low |
CVE-2026-45820, GHSA-px8p-9vwx-vf98 | fflate | 0.4.8 | High |
CVE-2026-111755, GHSA-8r9p-f939-6h3c | follow-redirects | 1.16.0 | High |
CVE-2026-116689, GHSA-mrwp-f3q8-3g9p | follow-redirects | 1.16.0 | High |
CVE-2026-111756, GHSA-q3jh-wrc6-jgq8 | follow-redirects | 1.16.0 | High |
CVE-2026-118773, GHSA-3g3m-2fjr-6pw4 | glob | 10.5.0 | Medium |
CVE-2026-118773, GHSA-3g3m-2fjr-6pw4 | glob | 13.0.6 | Medium |
CVE-2026-118773, GHSA-3g3m-2fjr-6pw4 | glob | 9.3.5 | Medium |
CVE-2026-106446, GHSA-8r5x-fm3f-whwj | handlebars | 4.7.9 | Critical |
CVE-2026-106445, GHSA-p8wg-vrv2-v86f | handlebars | 4.7.9 | Critical |
CVE-2026-106444, GHSA-xw65-4hp5-5hc7 | handlebars | 4.7.9 | Medium |
CVE-2026-59879, GHSA-v56q-mh7h-f735 | immutable | 5.1.5 | High |
CVE-2026-59880, GHSA-xvcm-6775-5m9r | immutable | 5.1.5 | High |
CVE-2026-84375, GHSA-2883-xcg3-v3hh | js-yaml | 4.1.1 | High |
CVE-2026-59869, GHSA-52cp-r559-cp3m | js-yaml | 4.1.1 | High |
GHSA-5p4m-2wfm-xmqj | js-yaml | 4.1.1 | High |
CVE-2026-53550, GHSA-h67p-54hq-rp68 | js-yaml | 4.1.1 | Medium |
CVE-2026-8657, GHSA-j4fx-xxwh-2485 | jsondiffpatch | 0.7.3 | High |
CVE-2026-59887, GHSA-v245-v573-v5vm | linkify-it | 5.0.1 | High |
GHSA-253c-mchw-3w2r | markdown-it | 14.1.1 | Medium |
CVE-2026-48988, GHSA-6v5v-wf23-fmfq | markdown-it | 14.1.1 | Medium |
CVE-2026-111758, GHSA-gfr2-rv44-r23c | markdown-it | 14.1.1 | High |
CVE-2026-111759, GHSA-r7fv-28h4-cvq7 | markdown-it | 14.1.1 | High |
CVE-2026-111766, GHSA-vfgh-jcmw-g37q | markdown-it | 14.1.1 | Low |
CVE-2026-118764, GHSA-g3hv-75wg-m249 | minimatch | 10.2.5 | Medium |
CVE-2026-118764, GHSA-g3hv-75wg-m249 | minimatch | 3.1.5 | Medium |
CVE-2026-118764, GHSA-g3hv-75wg-m249 | minimatch | 5.1.9 | Medium |
CVE-2026-118764, GHSA-g3hv-75wg-m249 | minimatch | 7.4.9 | Medium |
CVE-2026-118764, GHSA-g3hv-75wg-m249 | minimatch | 8.0.7 | Medium |
CVE-2026-118764, GHSA-g3hv-75wg-m249 | minimatch | 9.0.9 | Medium |
CVE-2026-5078, GHSA-4vj7-5mj6-jm8m | morgan | 1.10.1 | Medium |
CVE-2026-87859, GHSA-9f6g-j8ch-79g4 | morgan | 1.10.1 | Medium |
CVE-2026-15603, GHSA-jxfw-x594-9x9m | morgan | 1.10.1 | Medium |
CVE-2026-67214, GHSA-28wg-ghj8-5hjv | nanoid | 3.3.12 | High |
CVE-2026-67213, GHSA-2v37-7h3g-55p8 | nanoid | 3.3.12 | High |
CVE-2026-69153, GHSA-fxqj-rqcc-2cmp | postcss | 8.5.15 | Medium |
CVE-2026-73646, GHSA-r28c-9q8g-f849 | postcss | 8.5.15 | High |
CVE-2026-104844, GHSA-rj75-hqrm-r3gf | postcss-selector-parser | 7.1.1 | Medium |
CVE-2026-9358, GHSA-w9m9-85wc-3x92 | postcss-selector-parser | 7.1.1 | Medium |
Release integrity
Verdict: no release files.
- Checksums file: no
- Signatures: no
- SLSA provenance: no
- SBOM published with the release: no
Verified means a signature, provenance, or attestation was checked against an identity in hashicorp/vault's own GitHub Actions workflows.
Repository security (OpenSSF Scorecard)
Score 6.5/10, assessed 2026-10-19 (OpenSSF public dataset). Scorecard viewer
All checks
| Check | Score | Reason |
|---|---|---|
| CII-Best-Practices | 0 | no effort to earn an OpenSSF best practices badge detected |
| Code-Review | 0 | Found 0/30 approved changesets -- score normalized to 0 |
| SAST | 0 | no SAST tool detected |
| Token-Permissions | 0 | detected GitHub workflow tokens with excessive permissions |
| Branch-Protection | 8 | branch protection is not maximal on development and all release branches |
| Pinned-Dependencies | 8 | dependency not pinned by hash detected -- score normalized to 8 |
| License | 9 | license file detected |
| Binary-Artifacts | 10 | no binaries found in the repo |
| Dangerous-Workflow | 10 | no dangerous workflow patterns detected |
| Fuzzing | 10 | project is fuzzed |
| Maintained | 10 | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| Security-Policy | 10 | security policy file detected |
| Packaging | — | packaging workflow not detected |
| Signed-Releases | — | no releases found |
GitHub Actions workflow audit (zizmor)
339 potential issues in 50 workflow files at this release: 202 high, 39 medium, 97 low severity (medium or high confidence only). Each is a pattern to review, not a confirmed vulnerability.
All findings
Dependencies (650)
By ecosystem: golang 587, github 39, unknown 24.
Licenses (as declared in the SBOM): unknown 650.
golang (587)
| Name | Version | License | Declared in |
|---|---|---|---|
cel.dev/expr | v0.25.2 | go.mod | |
cloud.google.com/go | v0.123.0 | command/base/go.mod | |
cloud.google.com/go/auth | v0.23.3 | api/auth/gcp/go.mod | |
cloud.google.com/go/auth/oauth2adapt | v0.2.8 | api/auth/gcp/go.mod | |
cloud.google.com/go/cloudsqlconn | v1.21.0 | command/client/go.mod | |
cloud.google.com/go/compute/metadata | v0.9.1 | api/auth/gcp/go.mod | |
cloud.google.com/go/iam | v1.12.0 | api/auth/gcp/go.mod | |
cloud.google.com/go/kms | v1.32.0 | command/base/go.mod | |
cloud.google.com/go/longrunning | v1.2.0 | command/base/go.mod | |
cloud.google.com/go/monitoring | v1.30.0 | command/base/go.mod | |
cloud.google.com/go/spanner | v1.91.0 | go.mod | |
cloud.google.com/go/storage | v1.62.3 | go.mod | |
dario.cat/mergo | v1.0.2 | command/base/go.mod | |
filippo.io/edwards25519 | v1.2.0 | go.mod | |
github.com/99designs/go-keychain | v0.0.0-20191008050251-8e49817e8af4 | go.mod | |
github.com/aerospike/aerospike-client-go/v8 | v8.5.0 | go.mod | |
github.com/agext/levenshtein | v1.2.3 | command/client/go.mod | |
github.com/aliyun/alibaba-cloud-sdk-go | v1.63.107 | command/base/go.mod | |
github.com/aliyun/aliyun-oss-go-sdk | v0.0.0-20190307165228-86c17b95fcd5 | go.mod | |
github.com/andybalholm/brotli | v1.2.0 | go.mod | |
github.com/andybalholm/cascadia | v1.3.4 | tools/pipeline/go.mod | |
github.com/apache/arrow-go/v18 | v18.4.0 | go.mod | |
github.com/apache/thrift | v0.24.0 | go.mod | |
github.com/apparentlymart/go-textseg/v15 | v15.0.0 | command/client/go.mod | |
github.com/apparentlymart/go-textseg/v17 | v17.0.1 | command/client/go.mod | |
github.com/apple/foundationdb/bindings/go | v0.0.0-20190411004307-cd5c9d91fad2 | go.mod | |
github.com/armon/go-metrics | v0.4.1 | command/base/go.mod | |
github.com/armon/go-radix | v1.0.0 | command/base/go.mod | |
github.com/asaskevich/govalidator | v0.0.0-20230301143203-a9d515a09cc2 | command/base/go.mod | |
github.com/avast/retry-go/v4 | v4.7.0 | go.mod | |
github.com/aws/aws-sdk-go-v2 | v1.43.6 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.7.18 | go.mod | |
github.com/aws/aws-sdk-go-v2/config | v1.32.37 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/credentials | v1.19.36 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue | v1.20.51 | go.mod | |
github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.18.37 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/feature/rds/auth | v1.6.4 | go.mod | |
github.com/aws/aws-sdk-go-v2/feature/s3/manager | v1.22.28 | go.mod | |
github.com/aws/aws-sdk-go-v2/internal/configsources | v1.4.37 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.7.37 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/internal/v4a | v1.4.38 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/service/dynamodb | v1.60.0 | go.mod | |
github.com/aws/aws-sdk-go-v2/service/dynamodbstreams | v1.35.0 | go.mod | |
github.com/aws/aws-sdk-go-v2/service/ec2 | v1.200.0 | go.mod | |
github.com/aws/aws-sdk-go-v2/service/ecs | v1.53.8 | go.mod | |
github.com/aws/aws-sdk-go-v2/service/elasticache | v1.52.2 | go.mod | |
github.com/aws/aws-sdk-go-v2/service/iam | v1.54.5 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding | v1.13.17 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/service/internal/checksum | v1.9.30 | go.mod | |
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery | v1.12.7 | go.mod | |
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.13.37 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/service/internal/s3shared | v1.19.38 | go.mod | |
github.com/aws/aws-sdk-go-v2/service/kms | v1.50.5 | command/base/go.mod | |
github.com/aws/aws-sdk-go-v2/service/s3 | v1.107.2 | go.mod | |
github.com/aws/aws-sdk-go-v2/service/signin | v1.5.6 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/service/sso | v1.33.6 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/service/ssooidc | v1.38.6 | api/auth/aws/go.mod | |
github.com/aws/aws-sdk-go-v2/service/sts | v1.45.6 | api/auth/aws/go.mod | |
github.com/aws/smithy-go | v1.27.8 | api/auth/aws/go.mod | |
github.com/Azure/azure-pipeline-go | v0.2.3 | go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/azcore | v1.23.1 | command/base/go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/azidentity | v1.13.1 | command/base/go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/internal | v1.12.0 | command/base/go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys | v0.10.0 | command/base/go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal | v0.7.1 | command/base/go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2 | v2.2.0 | go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 | v4.2.1 | go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi | v1.3.0 | go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork | v1.1.0 | go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources | v1.2.0 | go.mod | |
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob | v1.4.1 | go.mod | |
github.com/Azure/azure-storage-blob-go | v0.15.0 | go.mod | |
github.com/Azure/go-ansiterm | v0.0.0-20250102033503-faa5f7b0171c | go.mod | |
github.com/Azure/go-autorest | v14.2.0+incompatible | command/base/go.mod | |
github.com/Azure/go-autorest/autorest | v0.11.30 | command/base/go.mod | |
github.com/Azure/go-autorest/autorest/adal | v0.9.24 | command/base/go.mod | |
github.com/Azure/go-autorest/autorest/date | v0.3.0 | command/base/go.mod | |
github.com/Azure/go-autorest/autorest/to | v0.4.1 | command/base/go.mod | |
github.com/Azure/go-autorest/logger | v0.2.1 | command/base/go.mod | |
github.com/Azure/go-autorest/tracing | v0.6.0 | command/base/go.mod | |
github.com/Azure/go-ntlmssp | v0.1.1 | command/client/go.mod | |
github.com/AzureAD/microsoft-authentication-library-for-go | v1.6.0 | command/base/go.mod | |
github.com/baiyubin/aliyun-sts-go-sdk | v0.0.0-20180326062324-cfa1a18b161f | go.mod | |
github.com/benbjohnson/immutable | v0.4.0 | go.mod | |
github.com/beorn7/perks | v1.0.1 | command/base/go.mod | |
github.com/bgentry/speakeasy | v0.2.0 | command/base/go.mod | |
github.com/boltdb/bolt | v1.3.1 | go.mod | |
github.com/boombuler/barcode | v1.0.1 | go.mod | |
github.com/bufbuild/protocompile | v0.14.2-0.20260716165721-bb5762d29672 | sdk/go.mod | |
github.com/BurntSushi/toml | v1.6.0 | command/client/go.mod | |
github.com/cenkalti/backoff | v2.2.1+incompatible | go.mod | |
github.com/cenkalti/backoff/v4 | v4.3.0 | api/auth/approle/go.mod | |
github.com/cespare/xxhash/v2 | v2.3.0 | api/auth/gcp/go.mod | |
github.com/chrismalek/oktasdk-go | v0.0.0-20181212195951-3430665dfaa0 | go.mod | |
github.com/circonus-labs/circonus-gometrics | v2.3.1+incompatible | command/base/go.mod | |
github.com/circonus-labs/circonusllhist | v0.1.3 | command/base/go.mod | |
github.com/clipperhouse/uax29/v2 | v2.7.0 | tools/pipeline/go.mod | |
github.com/cloudflare/circl | v1.6.3 | go.mod | |
github.com/cloudfoundry-community/go-cfclient | v0.0.0-20220930021109-9c4e6c59ccf1 | command/client/go.mod | |
github.com/cncf/xds/go | v0.0.0-20260202195803-dba9d589def2 | go.mod | |
github.com/cockroachdb/cockroach-go/v2 | v2.4.0 | go.mod | |
github.com/coder/websocket | v1.8.14 | command/client/go.mod | |
github.com/containerd/continuity | v0.4.5 | go.mod | |
github.com/containerd/errdefs | v1.0.0 | command/base/go.mod | |
github.com/containerd/errdefs/pkg | v0.3.0 | command/base/go.mod | |
github.com/containerd/log | v0.1.0 | go.mod | |
github.com/coreos/etcd | v3.3.27+incompatible | go.mod | |
github.com/coreos/go-oidc/v3 | v3.17.0 | command/client/go.mod | |
github.com/coreos/go-semver | v0.3.1 | go.mod | |
github.com/coreos/go-systemd | v0.0.0-20191104093116-d3cd4ed1dbcf | command/client/go.mod | |
github.com/coreos/go-systemd/v22 | v22.7.0 | go.mod | |
github.com/coreos/pkg | v0.0.0-20220810130054-c7d1c02cb6cf | go.mod | |
github.com/couchbase/gocb/v2 | v2.12.0 | go.mod | |
github.com/couchbase/gocbcore/v10 | v10.9.0 | go.mod | |
github.com/couchbase/gocbcoreps | v0.1.5-0.20260107140814-1c3a03f888f8 | go.mod | |
github.com/couchbase/goprotostellar | v1.0.5 | go.mod | |
github.com/couchbaselabs/gocbconnstr/v2 | v2.0.0 | go.mod | |
github.com/danieljoos/wincred | v1.2.3 | go.mod | |
github.com/DataDog/datadog-go | v4.8.3+incompatible | command/base/go.mod | |
github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | api/auth/approle/go.mod | |
github.com/decred/dcrd/dcrec/secp256k1/v4 | v4.2.0 | go.mod | |
github.com/denisenkom/go-mssqldb | v0.12.3 | go.mod | |
github.com/denverdino/aliyungo | v0.0.0-20190125010748-a747050bb1ba | go.mod | |
github.com/digitalocean/godo | v1.109.0 | go.mod | |
github.com/distribution/reference | v0.6.0 | command/base/go.mod | |
github.com/docker/cli | v29.6.1+incompatible | command/client/go.mod | |
github.com/docker/go-connections | v0.7.0 | command/base/go.mod | |
github.com/docker/go-units | v0.5.0 | command/base/go.mod | |
github.com/duosecurity/duo_api_golang | v0.0.0-20250430191550-ac36954387e7 | go.mod | |
github.com/dustin/go-humanize | v1.0.1 | go.mod | |
github.com/dvsekhvalnov/jose2go | v1.7.0 | go.mod | |
github.com/emicklei/go-restful/v3 | v3.12.2 | go.mod | |
github.com/envoyproxy/go-control-plane/envoy | v1.37.0 | go.mod | |
github.com/envoyproxy/protoc-gen-validate | v1.3.3 | go.mod | |
github.com/evanphx/json-patch/v5 | v5.9.11 | command/client/go.mod | |
github.com/fatih/color | v1.19.0 | api/auth/approle/go.mod | |
github.com/fatih/structs | v1.1.0 | go.mod | |
github.com/felixge/httpsnoop | v1.1.0 | api/auth/gcp/go.mod | |
github.com/frankban/quicktest | v1.14.6 | sdk/go.mod | |
github.com/fsnotify/fsnotify | v1.9.0 | go.mod | |
github.com/fxamacker/cbor/v2 | v2.9.0 | go.mod | |
github.com/gabriel-vasile/mimetype | v1.4.13 | go.mod | |
github.com/gammazero/deque | v1.2.1 | command/client/go.mod | |
github.com/gammazero/workerpool | v1.2.1 | command/client/go.mod | |
github.com/ghodss/yaml | v1.0.1-0.20190212211648-25d852aebe32 | command/base/go.mod | |
github.com/go-asn1-ber/asn1-ber | v1.5.8 | command/client/go.mod | |
github.com/go-errors/errors | v1.5.1 | go.mod | |
github.com/go-jose/go-jose/v3 | v3.0.5 | command/client/go.mod | |
github.com/go-jose/go-jose/v4 | v4.1.5 | api/auth/approle/go.mod | |
github.com/go-ldap/ldap/v3 | v3.4.13 | command/client/go.mod | |
github.com/go-ldap/ldif | v0.0.0-20250910174327-aa3bc3095c92 | go.mod | |
github.com/go-logr/logr | v1.4.4 | api/auth/gcp/go.mod | |
github.com/go-logr/stdr | v1.2.2 | api/auth/gcp/go.mod | |
github.com/go-ole/go-ole | v1.3.0 | go.mod | |
github.com/go-openapi/analysis | v0.26.0 | command/base/go.mod | |
github.com/go-openapi/errors | v0.22.8 | command/base/go.mod | |
github.com/go-openapi/jsonpointer | v1.0.0 | command/base/go.mod | |
github.com/go-openapi/jsonreference | v1.0.0 | command/base/go.mod | |
github.com/go-openapi/loads | v0.25.0 | command/base/go.mod | |
github.com/go-openapi/runtime | v0.33.0 | command/base/go.mod | |
github.com/go-openapi/runtime/server-middleware | v0.33.0 | command/base/go.mod | |
github.com/go-openapi/spec | v0.22.9 | command/base/go.mod | |
github.com/go-openapi/strfmt | v0.27.0 | command/base/go.mod | |
github.com/go-openapi/swag | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/cmdutils | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/conv | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/fileutils | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/jsonutils | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/loading | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/mangling | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/netutils | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/pools | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/stringutils | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/typeutils | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/swag/yamlutils | v0.28.0 | command/base/go.mod | |
github.com/go-openapi/validate | v0.26.3 | command/base/go.mod | |
github.com/go-resty/resty/v2 | v2.17.2 | go.mod | |
github.com/go-sql-driver/mysql | v1.10.0 | go.mod | |
github.com/go-test/deep | v1.1.1 | api/go.mod | |
github.com/go-viper/mapstructure/v2 | v2.5.0 | command/base/go.mod | |
github.com/go-zookeeper/zk | v1.0.3 | go.mod | |
github.com/goccy/go-json | v0.10.5 | go.mod | |
github.com/gocql/gocql | v1.0.0 | go.mod | |
github.com/gofrs/flock | v0.13.0 | command/base/go.mod | |
github.com/golang-jwt/jwt/v4 | v4.5.2 | command/base/go.mod | |
github.com/golang-jwt/jwt/v5 | v5.3.1 | command/base/go.mod | |
github.com/golang-sql/civil | v0.0.0-20220223132316-b832511892a9 | go.mod | |
github.com/golang-sql/sqlexp | v0.1.0 | go.mod | |
github.com/golang/groupcache | v0.0.0-20241129210726-2c02b8208cf8 | command/client/go.mod | |
github.com/golang/mock | v1.7.0-rc.1 | command/client/go.mod | |
github.com/golang/protobuf | v1.5.4 | command/base/go.mod | |
github.com/golang/snappy | v1.0.0 | command/base/go.mod | |
github.com/google/certificate-transparency-go | v1.3.3 | go.mod | |
github.com/google/flatbuffers | v25.2.10+incompatible | go.mod | |
github.com/google/gnostic-models | v0.7.0 | go.mod | |
github.com/google/go-attestation | v0.6.4 | command/client/go.mod | |
github.com/google/go-cmp | v0.7.0 | command/client/go.mod | |
github.com/google/go-github/v83 | v83.0.0 | go.mod | |
github.com/google/go-metrics-stackdriver | v0.2.0 | command/base/go.mod | |
github.com/google/go-querystring | v1.2.0 | go.mod | |
github.com/google/go-tpm | v0.9.8 | command/client/go.mod | |
github.com/google/pprof | v0.0.0-20250630185457-6e76a2b096b5 | go.mod | |
github.com/google/s2a-go | v0.1.10 | api/auth/gcp/go.mod | |
github.com/google/shlex | v0.0.0-20191202100458-e7afc7fbc510 | go.mod | |
github.com/google/uuid | v1.6.0 | command/base/go.mod | |
github.com/googleapis/enterprise-certificate-proxy | v0.3.22 | api/auth/gcp/go.mod | |
github.com/googleapis/gax-go/v2 | v2.24.1 | api/auth/gcp/go.mod | |
github.com/GoogleCloudPlatform/grpc-gcp-go/grpcgcp | v1.6.0 | go.mod | |
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp | v1.34.0 | go.mod | |
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric | v0.56.0 | go.mod | |
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping | v0.56.0 | go.mod | |
github.com/gophercloud/gophercloud | v1.14.1 | go.mod | |
github.com/gopherjs/gopherjs | v1.17.2 | go.mod | |
github.com/gorilla/websocket | v1.5.4-0.20250319132907-e064f32e3674 | command/client/go.mod | |
github.com/grpc-ecosystem/grpc-gateway/v2 | v2.30.0 | go.mod | |
github.com/hailocab/go-hostpool | v0.0.0-20160125115350-e80d13ce29ed | go.mod | |
github.com/hashicorp/cap | v0.13.0 | command/client/go.mod | |
github.com/hashicorp/cap/ldap | v0.0.0-20250911140431-44d01434c285 | command/client/go.mod | |
github.com/hashicorp/cli | v1.1.7 | command/base/go.mod | |
github.com/hashicorp/consul-template | v0.42.2-0.20260928065529-0a3d8a62f7ab | command/client/go.mod | |
github.com/hashicorp/consul/api | v1.34.4 | command/client/go.mod | |
github.com/hashicorp/cronexpr | v1.1.3 | command/client/go.mod | |
github.com/hashicorp/errwrap | v1.1.0 | api/auth/approle/go.mod | |
github.com/hashicorp/eventlogger | v0.2.11 | go.mod | |
github.com/hashicorp/go-bexpr | v0.1.15 | go.mod | |
github.com/hashicorp/go-cleanhttp | v0.5.2 | api/auth/approle/go.mod | |
github.com/hashicorp/go-discover | v1.5.0 | go.mod | |
github.com/hashicorp/go-discover/provider/gce | v0.0.0-20260914175500-8f14004e9a7f | go.mod | |
github.com/hashicorp/go-gcp-common | v0.9.2 | command/client/go.mod | |
github.com/hashicorp/go-hclog | v1.6.3 | api/auth/aws/go.mod | |
github.com/hashicorp/go-hmac-drbg | v0.0.0-20210916214228-a6e5a68489f6 | command/base/go.mod | |
github.com/hashicorp/go-immutable-radix | v1.3.1 | command/base/go.mod | |
github.com/hashicorp/go-kms-wrapping/entropy/v2 | v2.0.1 | command/base/go.mod | |
github.com/hashicorp/go-kms-wrapping/v2 | v2.0.26 | command/base/go.mod | |
github.com/hashicorp/go-kms-wrapping/wrappers/aead/v2 | v2.0.10 | command/base/go.mod | |
github.com/hashicorp/go-kms-wrapping/wrappers/alicloudkms/v2 | v2.0.5 | command/base/go.mod | |
github.com/hashicorp/go-kms-wrapping/wrappers/awskms/v4 | v4.0.4 | command/base/go.mod | |
github.com/hashicorp/go-kms-wrapping/wrappers/azurekeyvault/v2 | v2.0.16 | command/base/go.mod | |
github.com/hashicorp/go-kms-wrapping/wrappers/gcpckms/v2 | v2.0.14 | command/base/go.mod | |
github.com/hashicorp/go-kms-wrapping/wrappers/ocikms/v2 | v2.0.11 | command/base/go.mod | |
github.com/hashicorp/go-kms-wrapping/wrappers/transit/v2 | v2.0.13 | command/base/go.mod | |
github.com/hashicorp/go-memdb | v1.3.5 | command/client/go.mod | |
github.com/hashicorp/go-metrics | v0.6.1 | command/base/go.mod | |
github.com/hashicorp/go-msgpack/v2 | v2.1.5 | go.mod | |
github.com/hashicorp/go-multierror | v1.1.1 | api/auth/approle/go.mod | |
github.com/hashicorp/go-pgmultiauth | v1.1.0 | go.mod | |
github.com/hashicorp/go-plugin | v1.8.0 | command/base/go.mod | |
github.com/hashicorp/go-raftchunking | v0.6.3-0.20191002164813-7e9e8525653a | go.mod | |
github.com/hashicorp/go-retryablehttp | v0.7.8 | api/auth/approle/go.mod | |
github.com/hashicorp/go-rootcerts | v1.0.2 | api/auth/approle/go.mod | |
github.com/hashicorp/go-secure-stdlib/awsutil/v2 | v2.1.2 | api/auth/aws/go.mod | |
github.com/hashicorp/go-secure-stdlib/base62 | v0.1.2 | command/client/go.mod | |
github.com/hashicorp/go-secure-stdlib/cryptoutil | v0.1.1 | command/base/go.mod | |
github.com/hashicorp/go-secure-stdlib/fileutil | v0.1.0 | go.mod | |
github.com/hashicorp/go-secure-stdlib/gatedwriter | v0.1.1 | command/client/go.mod | |
github.com/hashicorp/go-secure-stdlib/httputil | v0.1.0 | command/client/go.mod | |
github.com/hashicorp/go-secure-stdlib/kv-builder | v0.1.2 | command/base/go.mod | |
github.com/hashicorp/go-secure-stdlib/mlock | v0.1.4-0.20261005181433-49bfb1561b96 | command/base/go.mod | |
github.com/hashicorp/go-secure-stdlib/nonceutil | v0.1.0 | go.mod | |
github.com/hashicorp/go-secure-stdlib/parseutil | v0.2.0 | api/auth/approle/go.mod | |
github.com/hashicorp/go-secure-stdlib/password | v0.1.6-0.20261005181433-49bfb1561b96 | command/client/go.mod | |
github.com/hashicorp/go-secure-stdlib/permitpool | v1.0.0 | command/base/go.mod | |
github.com/hashicorp/go-secure-stdlib/plugincontainer | v0.5.0 | command/base/go.mod | |
github.com/hashicorp/go-secure-stdlib/regexp | v1.0.0 | command/client/go.mod | |
github.com/hashicorp/go-secure-stdlib/reloadutil | v0.1.1 | command/client/go.mod | |
github.com/hashicorp/go-secure-stdlib/strutil | v0.1.2 | api/auth/approle/go.mod | |
github.com/hashicorp/go-secure-stdlib/tlsutil | v0.1.3 | command/base/go.mod | |
github.com/hashicorp/go-slug | v0.16.8 | go.mod | |
github.com/hashicorp/go-sockaddr | v1.0.7 | api/auth/approle/go.mod | |
github.com/hashicorp/go-syslog | v1.0.1 | command/client/go.mod | |
github.com/hashicorp/go-tfe | v1.101.0 | go.mod | |
github.com/hashicorp/go-uuid | v1.0.4 | api/auth/aws/go.mod | |
github.com/hashicorp/go-version | v1.9.0 | command/base/go.mod | |
github.com/hashicorp/golang-lru | v1.0.2 | command/base/go.mod | |
github.com/hashicorp/golang-lru/v2 | v2.0.7 | go.mod | |
github.com/hashicorp/hcl | v1.0.1-vault-7 | api/auth/approle/go.mod | |
github.com/hashicorp/hcl/v2 | v2.24.0 | command/client/go.mod | |
github.com/hashicorp/hcp-sdk-go | v0.138.0 | command/base/go.mod | |
github.com/hashicorp/jsonapi | v1.4.3-0.20250220162346-81a76b606f3e | go.mod | |
github.com/hashicorp/logutils | v1.0.0 | command/client/go.mod | |
github.com/hashicorp/mdns | v1.0.7 | go.mod | |
github.com/hashicorp/nomad/api | v0.0.0-20260410071528-9e6d492b59a8 | command/client/go.mod | |
github.com/hashicorp/raft | v1.7.3 | go.mod | |
github.com/hashicorp/raft-autopilot | v0.3.0 | go.mod | |
github.com/hashicorp/raft-boltdb/v2 | v2.3.0 | go.mod | |
github.com/hashicorp/raft-snapshot | v1.0.4 | go.mod | |
github.com/hashicorp/raft-wal | v0.4.0 | go.mod | |
github.com/hashicorp/releases-api | v0.4.14 | tools/pipeline/go.mod | |
github.com/hashicorp/serf | v0.10.4 | command/client/go.mod | |
github.com/hashicorp/vault | UNKNOWN | internalshared/go.mod | |
github.com/hashicorp/vault-envelope-encryption-sdk | v0.1.1 | go.mod | |
github.com/hashicorp/vault-hcp-lib | v0.0.0-20250306185756-615fe2449b16 | command/base/go.mod | |
github.com/hashicorp/vault-plugin-auth-alicloud | v0.24.0 | command/client/go.mod | |
github.com/hashicorp/vault-plugin-auth-azure | v0.25.1 | go.mod | |
github.com/hashicorp/vault-plugin-auth-cf | v0.24.0 | command/client/go.mod | |
github.com/hashicorp/vault-plugin-auth-gcp | v0.24.1 | command/client/go.mod | |
github.com/hashicorp/vault-plugin-auth-jwt | v0.27.1 | command/client/go.mod | |
github.com/hashicorp/vault-plugin-auth-kerberos | v0.18.0 | command/client/go.mod | |
github.com/hashicorp/vault-plugin-auth-kubernetes | v0.25.0 | go.mod | |
github.com/hashicorp/vault-plugin-auth-oci | v0.22.0 | command/client/go.mod | |
github.com/hashicorp/vault-plugin-database-couchbase | v0.17.0 | go.mod | |
github.com/hashicorp/vault-plugin-database-elasticsearch | v0.21.0 | go.mod | |
github.com/hashicorp/vault-plugin-database-mongodbatlas | v0.18.0 | go.mod | |
github.com/hashicorp/vault-plugin-database-redis | v0.9.0 | go.mod | |
github.com/hashicorp/vault-plugin-database-redis-elasticache | v0.10.0 | go.mod | |
github.com/hashicorp/vault-plugin-database-snowflake | v0.17.0 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-ad | v0.23.0 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-alicloud | v0.23.0 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-azure | v0.25.1 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-gcp | v0.25.0 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-gcpkms | v0.25.0 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-kubernetes | v0.14.0 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-kv | v0.27.0 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-mongodbatlas | v0.18.0 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-openldap | v0.19.0 | go.mod | |
github.com/hashicorp/vault-plugin-secrets-terraform | v0.15.0 | go.mod | |
github.com/hashicorp/vault-testing-stepwise | v0.3.4 | go.mod | |
github.com/hashicorp/vault/api | UNKNOWN | command/base/go.mod | |
github.com/hashicorp/vault/api | v1.16.0 | sdk/go.mod | |
github.com/hashicorp/vault/api | v1.23.0 | api/auth/approle/go.mod | |
github.com/hashicorp/vault/api/auth/approle | UNKNOWN | go.mod | |
github.com/hashicorp/vault/api/auth/kubernetes | UNKNOWN | command/client/go.mod | |
github.com/hashicorp/vault/api/auth/userpass | UNKNOWN | go.mod | |
github.com/hashicorp/vault/command/base | UNKNOWN | command/client/go.mod | |
github.com/hashicorp/vault/command/client | UNKNOWN | go.mod | |
github.com/hashicorp/vault/internalshared | UNKNOWN | command/base/go.mod | |
github.com/hashicorp/vault/sdk | UNKNOWN | command/base/go.mod | |
github.com/hashicorp/vault/version | UNKNOWN | command/base/go.mod | |
github.com/hashicorp/yamux | v0.1.2 | command/base/go.mod | |
github.com/hasura/go-graphql-client | v0.16.0 | tools/pipeline/go.mod | |
github.com/huandu/xstrings | v1.5.0 | command/base/go.mod | |
github.com/imdario/mergo | v0.3.16 | tools/pipeline/go.mod | |
github.com/inconshreveable/mousetrap | v1.1.0 | tools/pipeline/go.mod | |
github.com/influxdata/influxdb1-client | v0.0.0-20200827194710-b269163b24ab | go.mod | |
github.com/instana/go-sensor | v1.68.0 | go.mod | |
github.com/jackc/pgerrcode | v0.0.0-20240316143900-6e2875d9b438 | tools/pipeline/go.mod | |
github.com/jackc/pgpassfile | v1.0.0 | command/client/go.mod | |
github.com/jackc/pgservicefile | v0.0.0-20240606120523-5a60cdf6a761 | command/client/go.mod | |
github.com/jackc/pgx/v5 | v5.10.0 | command/client/go.mod | |
github.com/jackc/puddle/v2 | v2.2.2 | command/client/go.mod | |
github.com/jcmturner/aescts/v2 | v2.0.0 | command/client/go.mod | |
github.com/jcmturner/dnsutils/v2 | v2.0.0 | command/client/go.mod | |
github.com/jcmturner/gofork | v1.7.6 | command/client/go.mod | |
github.com/jcmturner/goidentity/v6 | v6.0.1 | command/client/go.mod | |
github.com/jcmturner/gokrb5/v8 | v8.4.4 | command/client/go.mod | |
github.com/jcmturner/rpc/v2 | v2.0.3 | command/client/go.mod | |
github.com/jedib0t/go-pretty/v6 | v6.8.3 | tools/pipeline/go.mod | |
github.com/Jeffail/gabs/v2 | v2.1.0 | go.mod | |
github.com/Jeffail/keyring | v1.2.3 | go.mod | |
github.com/jeffchao/backoff | v0.0.0-20140404060208-9d7fd7aa17f2 | go.mod | |
github.com/jefferai/isbadcipher | v0.0.0-20190226160619-51d2077c035f | command/client/go.mod | |
github.com/jefferai/jsonx | v1.0.1 | go.mod | |
github.com/jellydator/ttlcache/v3 | v3.4.2-0.20260813123107-3b64b9cd34ac | command/client/go.mod | |
github.com/jessevdk/go-flags | v1.6.1 | tools/pipeline/go.mod | |
github.com/jimlambrt/gldap | v0.1.14 | sdk/go.mod | |
github.com/jmespath/go-jmespath | v0.4.1-0.20220621161143-b0104c826a24 | command/base/go.mod | |
github.com/joshlf/go-acl | v0.0.0-20200411065538-eae00ae38531 | command/base/go.mod | |
github.com/json-iterator/go | v1.1.13-0.20220915233716-71ac16282d12 | command/base/go.mod | |
github.com/kelseyhightower/envconfig | v1.4.0 | go.mod | |
github.com/klauspost/asmfmt | v1.3.2 | go.mod | |
github.com/klauspost/compress | v1.19.1 | go.mod | |
github.com/klauspost/cpuid/v2 | v2.3.0 | go.mod | |
github.com/kr/pretty | v0.3.1 | command/client/go.mod | |
github.com/kr/text | v0.2.0 | command/base/go.mod | |
github.com/kylelemons/godebug | v1.1.0 | command/base/go.mod | |
github.com/lestrrat-go/backoff/v2 | v2.0.8 | go.mod | |
github.com/lestrrat-go/blackmagic | v1.0.2 | go.mod | |
github.com/lestrrat-go/httpcc | v1.0.1 | go.mod | |
github.com/lestrrat-go/iter | v1.0.2 | go.mod | |
github.com/lestrrat-go/jwx | v1.2.29 | go.mod | |
github.com/lestrrat-go/option | v1.0.1 | go.mod | |
github.com/lib/pq | v1.11.2 | go.mod | |
github.com/linode/linodego | v1.68.0 | go.mod | |
github.com/looplab/fsm | v1.0.3 | go.mod | |
github.com/lufia/plan9stats | v0.0.0-20260216142805-b3301c5f2a88 | go.mod | |
github.com/Masterminds/goutils | v1.1.1 | command/base/go.mod | |
github.com/Masterminds/semver | v1.5.0 | command/client/go.mod | |
github.com/Masterminds/semver/v3 | v3.4.0 | command/base/go.mod | |
github.com/Masterminds/sprig/v3 | v3.3.0 | command/base/go.mod | |
github.com/mattn/go-colorable | v0.1.15 | api/auth/approle/go.mod | |
github.com/mattn/go-ieproxy | v0.0.1 | go.mod | |
github.com/mattn/go-isatty | v0.0.24 | api/auth/approle/go.mod | |
github.com/mattn/go-runewidth | v0.0.27 | tools/pipeline/go.mod | |
github.com/mediocregopher/radix/v4 | v4.1.4 | go.mod | |
github.com/michaelklishin/rabbit-hole/v2 | v2.12.0 | go.mod | |
github.com/Microsoft/go-winio | v0.6.2 | command/base/go.mod | |
github.com/microsoft/kiota-abstractions-go | v1.11.0 | go.mod | |
github.com/microsoft/kiota-authentication-azure-go | v1.3.1 | go.mod | |
github.com/microsoft/kiota-http-go | v1.5.6 | go.mod | |
github.com/microsoft/kiota-serialization-form-go | v1.1.3 | go.mod | |
github.com/microsoft/kiota-serialization-json-go | v1.1.4 | go.mod | |
github.com/microsoft/kiota-serialization-multipart-go | v1.1.2 | go.mod | |
github.com/microsoft/kiota-serialization-text-go | v1.1.3 | go.mod | |
github.com/microsoftgraph/msgraph-sdk-go | v1.97.0 | go.mod | |
github.com/microsoftgraph/msgraph-sdk-go-core | v1.4.1 | go.mod | |
github.com/miekg/dns | v1.1.73 | command/client/go.mod | |
github.com/mikesmitty/edkey | v0.0.0-20170222072505-3356ea4e686a | go.mod | |
github.com/minio/asm2plan9s | v0.0.0-20200509001527-cdd76441f9d8 | go.mod | |
github.com/minio/c2goasm | v0.0.0-20190812172519-36a3d3bbc4f3 | go.mod | |
github.com/mitchellh/colorstring | v0.0.0-20190213212951-d06e56a500db | command/base/go.mod | |
github.com/mitchellh/copystructure | v1.2.0 | command/base/go.mod | |
github.com/mitchellh/go-homedir | v1.1.0 | api/auth/approle/go.mod | |
github.com/mitchellh/go-wordwrap | v1.0.1 | command/client/go.mod | |
github.com/mitchellh/hashstructure | v1.1.0 | command/client/go.mod | |
github.com/mitchellh/mapstructure | v1.5.1-0.20231216201459-8508981c8b6c | api/auth/approle/go.mod | |
github.com/mitchellh/pointerstructure | v1.2.1 | command/client/go.mod | |
github.com/mitchellh/reflectwalk | v1.0.2 | command/base/go.mod | |
github.com/moby/docker-image-spec | v1.3.1 | command/base/go.mod | |
github.com/moby/go-archive | v0.3.0 | go.mod | |
github.com/moby/moby/api | v1.56.0 | command/base/go.mod | |
github.com/moby/moby/client | v0.6.0 | command/base/go.mod | |
github.com/moby/patternmatcher | v0.6.1 | go.mod | |
github.com/moby/sys/sequential | v0.7.0 | go.mod | |
github.com/moby/sys/user | v0.4.1 | go.mod | |
github.com/moby/sys/userns | v0.1.0 | go.mod | |
github.com/moby/term | v0.5.2 | go.mod | |
github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | command/base/go.mod | |
github.com/modern-go/reflect2 | v1.0.3-0.20250322232337-35a7c28c31ee | command/base/go.mod | |
github.com/mongodb-forks/digest | v1.1.0 | go.mod | |
github.com/montanaflynn/stats | v0.7.1 | go.mod | |
github.com/moov-io/signedxml | v1.1.1 | command/client/go.mod | |
github.com/mtibben/percent | v0.2.1 | go.mod | |
github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | command/base/go.mod | |
github.com/natefinch/atomic | v1.0.1 | api/go.mod | |
github.com/ncw/swift | v1.0.47 | go.mod | |
github.com/nicolai86/scaleway-sdk | v1.10.2-0.20180628010248-798f60e20bb2 | go.mod | |
github.com/Nvveen/Gotty | v0.0.0-20120604004816-cd527374f1e5 | go.mod | |
github.com/oklog/run | v1.2.0 | command/base/go.mod | |
github.com/oklog/ulid/v2 | v2.1.2 | command/base/go.mod | |
github.com/okta/okta-sdk-golang/v5 | v5.0.2 | go.mod | |
github.com/opencontainers/go-digest | v1.0.0 | command/base/go.mod | |
github.com/opencontainers/image-spec | v1.1.1 | command/base/go.mod | |
github.com/opencontainers/runc | v1.3.6 | command/client/go.mod | |
github.com/opentracing/opentracing-go | v1.2.1-0.20220228012449-10b1cf09e00b | command/base/go.mod | |
github.com/oracle/oci-go-sdk | v24.3.0+incompatible | command/client/go.mod | |
github.com/oracle/oci-go-sdk/v65 | v65.123.0 | command/base/go.mod | |
github.com/ory/dockertest | v3.3.5+incompatible | go.mod | |
github.com/ory/dockertest/v3 | v3.12.0 | go.mod | |
github.com/owenrumney/go-sarif/v3 | v3.3.1 | tools/pipeline/go.mod | |
github.com/packethost/packngo | v0.1.1-0.20180711074735-b9cb5096f54c | go.mod | |
github.com/patrickmn/go-cache | v2.1.0+incompatible | command/client/go.mod | |
github.com/pavlo-v-chernykh/keystore-go/v4 | v4.5.0 | go.mod | |
github.com/petermattis/goid | v0.0.0-20260716134002-a9b348f0a2b9 | command/base/go.mod | |
github.com/pierrec/lz4 | v2.6.1+incompatible | command/base/go.mod | |
github.com/pierrec/lz4/v4 | v4.1.27 | go.mod | |
github.com/pires/go-proxyproto | v0.11.0 | go.mod | |
github.com/pkg/browser | v0.0.0-20240102092130-5ac0b6a4141c | command/base/go.mod | |
github.com/pkg/errors | v0.9.1 | command/base/go.mod | |
github.com/planetscale/vtprotobuf | v0.6.1-0.20240319094008-0393e58bdf10 | go.mod | |
github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | tools/pipeline/go.mod | |
github.com/posener/complete | v1.2.3 | command/base/go.mod | |
github.com/power-devops/perfstat | v0.0.0-20240221224432-82ca36839d55 | go.mod | |
github.com/pquerna/otp | v1.5.0 | go.mod | |
github.com/prometheus/client_golang | v1.24.1 | command/base/go.mod | |
github.com/prometheus/client_model | v0.6.2 | command/base/go.mod | |
github.com/prometheus/common | v0.70.1 | command/base/go.mod | |
github.com/prometheus/procfs | v0.21.1 | command/base/go.mod | |
github.com/ProtonMail/go-crypto | v1.4.0 | go.mod | |
github.com/ProtonMail/gopenpgp/v3 | v3.3.0 | go.mod | |
github.com/PuerkitoBio/goquery | v1.12.0 | tools/pipeline/go.mod | |
github.com/rboyer/safeio | v0.2.3 | go.mod | |
github.com/richardlehane/mscfb | v1.0.7 | tools/pipeline/go.mod | |
github.com/richardlehane/msoleps | v1.0.6 | tools/pipeline/go.mod | |
github.com/robfig/cron/v3 | v3.0.1 | command/base/go.mod | |
github.com/rogpeppe/go-internal | v1.14.1 | command/client/go.mod | |
github.com/ryancragun/triton-go/v2 | v2.0.0-20260514164147-e8b61dd0652d | go.mod | |
github.com/ryanuber/columnize | v2.1.2+incompatible | command/base/go.mod | |
github.com/ryanuber/go-glob | v1.0.0 | api/auth/approle/go.mod | |
github.com/SAP/go-hdb | v1.10.1 | go.mod | |
github.com/sasha-s/go-deadlock | v0.3.5 | command/base/go.mod | |
github.com/Sectorbob/mlab-ns2 | v0.0.0-20171030222938-d3aa0c295a8a | go.mod | |
github.com/segmentio/fasthash | v1.0.3 | go.mod | |
github.com/sethvargo/go-limiter | v0.7.1 | go.mod | |
github.com/shirou/gopsutil/v3 | v3.22.6 | go.mod | |
github.com/shirou/gopsutil/v4 | v4.26.2 | go.mod | |
github.com/shopspring/decimal | v1.4.0 | command/base/go.mod | |
github.com/shurcooL/githubv4 | v0.0.0-20260209031235-2402fdf4a9ed | tools/pipeline/go.mod | |
github.com/shurcooL/graphql | v0.0.0-20240915155400-7ee5256398cf | tools/pipeline/go.mod | |
github.com/sirupsen/logrus | v1.9.4 | go.mod | |
github.com/skratchdot/open-golang | v0.0.0-20200116055534-eef842397966 | command/base/go.mod | |
github.com/slack-go/slack | v0.27.0 | tools/pipeline/go.mod | |
github.com/smartystreets/assertions | v1.13.1 | go.mod | |
github.com/smartystreets/goconvey | v1.8.0 | command/client/go.mod | |
github.com/snowflakedb/gosnowflake | v1.19.0 | go.mod | |
github.com/softlayer/softlayer-go | v1.2.1 | go.mod | |
github.com/softlayer/xmlrpc | v0.0.0-20200409220501-5f089df7cb7e | go.mod | |
github.com/sony/gobreaker/v2 | v2.4.0 | command/base/go.mod | |
github.com/spf13/cast | v1.10.0 | command/base/go.mod | |
github.com/spf13/cobra | v1.10.2 | tools/pipeline/go.mod | |
github.com/spf13/pflag | v1.0.10 | go.mod | |
github.com/spiffe/go-spiffe/v2 | v2.8.2 | go.mod | |
github.com/std-uritemplate/std-uritemplate/go/v2 | v2.0.12 | go.mod | |
github.com/stretchr/objx | v0.5.3 | go.mod | |
github.com/stretchr/testify | v1.12.1 | api/auth/approle/go.mod | |
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common | v1.3.83 | go.mod | |
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cvm | v1.0.480 | go.mod | |
github.com/tiendc/go-deepcopy | v1.7.2 | tools/pipeline/go.mod | |
github.com/tilinna/clock | v1.1.0 | go.mod | |
github.com/tink-crypto/tink-go/v2 | v2.7.0 | go.mod | |
github.com/tklauser/go-sysconf | v0.3.16 | go.mod | |
github.com/tklauser/numcpus | v0.11.0 | go.mod | |
github.com/tv42/httpunix | v0.0.0-20191220191345-2ba4b9c3382c | command/base/go.mod | |
github.com/veqryn/slog-context | v0.9.0 | tools/pipeline/go.mod | |
github.com/vmware/govmomi | v0.55.1 | go.mod | |
github.com/wadey/gocovmerge | v0.0.0-20160331181800-b5bfa59ec0ad | go.mod | |
github.com/x448/float16 | v0.8.4 | go.mod | |
github.com/xdg-go/pbkdf2 | v1.0.0 | go.mod | |
github.com/xdg-go/scram | v1.1.2 | go.mod | |
github.com/xdg-go/stringprep | v1.0.4 | go.mod | |
github.com/xeipuuv/gojsonpointer | v0.0.0-20190905194746-02993c407bfb | command/base/go.mod | |
github.com/xeipuuv/gojsonreference | v0.0.0-20180127040603-bd5ef7bd5415 | go.mod | |
github.com/xeipuuv/gojsonschema | v1.2.0 | go.mod | |
github.com/xuri/efp | v0.0.1 | tools/pipeline/go.mod | |
github.com/xuri/excelize/v2 | v2.11.0 | tools/pipeline/go.mod | |
github.com/xuri/nfp | v0.0.2-0.20250530014748-2ddeb826f9a9 | tools/pipeline/go.mod | |
github.com/youmark/pkcs8 | v0.0.0-20240726163527-a2c0da244d78 | command/base/go.mod | |
github.com/yuin/gopher-lua | v1.1.1 | go.mod | |
github.com/yusufpapurcu/wmi | v1.2.4 | go.mod | |
github.com/zclconf/go-cty | v1.19.0 | command/client/go.mod | |
github.com/zeebo/xxh3 | v1.0.2 | go.mod | |
go.etcd.io/bbolt | v1.5.0 | command/client/go.mod | |
go.etcd.io/etcd/api/v3 | v3.7.1 | go.mod | |
go.etcd.io/etcd/client/pkg/v3 | v3.7.1 | go.mod | |
go.etcd.io/etcd/client/v2 | v2.305.33 | go.mod | |
go.etcd.io/etcd/client/v3 | v3.7.1 | go.mod | |
go.mongodb.org/atlas | v0.38.0 | go.mod | |
go.mongodb.org/mongo-driver | v1.17.9 | go.mod | |
go.opencensus.io | v0.24.0 | command/client/go.mod | |
go.opentelemetry.io/auto/sdk | v1.2.1 | api/auth/gcp/go.mod | |
go.opentelemetry.io/contrib/detectors/gcp | v1.44.0 | go.mod | |
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | v0.70.0 | api/auth/gcp/go.mod | |
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.70.0 | api/auth/gcp/go.mod | |
go.opentelemetry.io/otel | v1.46.0 | api/auth/gcp/go.mod | |
go.opentelemetry.io/otel/metric | v1.46.0 | api/auth/gcp/go.mod | |
go.opentelemetry.io/otel/sdk | v1.45.0 | go.mod | |
go.opentelemetry.io/otel/sdk/metric | v1.45.0 | go.mod | |
go.opentelemetry.io/otel/trace | v1.46.0 | api/auth/gcp/go.mod | |
go.uber.org/atomic | v1.12.0 | command/base/go.mod | |
go.uber.org/multierr | v1.11.0 | go.mod | |
go.uber.org/zap | v1.28.0 | go.mod | |
go.yaml.in/yaml/v2 | v2.4.4 | go.mod | |
go.yaml.in/yaml/v3 | v3.0.5 | api/go.mod | |
golang.org/x/crypto | v0.57.0 | api/auth/gcp/go.mod | |
golang.org/x/crypto | v0.58.0 | go.mod | |
golang.org/x/exp | v0.0.0-20260709172345-9ea1abe57597 | command/client/go.mod | |
golang.org/x/mod | v0.41.0 | command/client/go.mod | |
golang.org/x/net | v0.60.0 | api/auth/approle/go.mod | |
golang.org/x/oauth2 | v0.37.0 | api/auth/gcp/go.mod | |
golang.org/x/sync | v0.23.0 | api/auth/gcp/go.mod | |
golang.org/x/sync | v0.24.0 | go.mod | |
golang.org/x/sys | v0.48.0 | api/auth/aws/go.mod | |
golang.org/x/sys | v0.49.0 | api/auth/approle/go.mod | |
golang.org/x/telemetry | v0.0.0-20260924152758-ed294f943157 | go.mod | |
golang.org/x/term | v0.46.0 | command/client/go.mod | |
golang.org/x/term | v0.47.0 | go.mod | |
golang.org/x/text | v0.42.0 | api/auth/approle/go.mod | |
golang.org/x/text | v0.43.0 | go.mod | |
golang.org/x/time | v0.16.0 | api/auth/approle/go.mod | |
golang.org/x/tools | v0.49.0 | command/client/go.mod | |
golang.org/x/tools | v0.51.0 | go.mod | |
golang.org/x/xerrors | v0.0.0-20240903120638-7835f813f4da | go.mod | |
google.golang.org/api | v0.299.0 | api/auth/gcp/go.mod | |
google.golang.org/genproto | v0.0.0-20260715232425-e75dac1f907d | api/auth/gcp/go.mod | |
google.golang.org/genproto/googleapis/api | v0.0.0-20260819154853-08b0e4226688 | api/auth/gcp/go.mod | |
google.golang.org/genproto/googleapis/rpc | v0.0.0-20260921155816-b14227669459 | api/auth/gcp/go.mod | |
google.golang.org/grpc | v1.83.2 | go.mod | |
google.golang.org/grpc | v1.84.0 | api/auth/gcp/go.mod | |
google.golang.org/protobuf | v1.36.12 | api/auth/gcp/go.mod | |
gopkg.in/evanphx/json-patch.v4 | v4.13.0 | go.mod | |
gopkg.in/inf.v0 | v0.9.1 | go.mod | |
gopkg.in/ini.v1 | v1.67.1 | command/base/go.mod | |
gopkg.in/jcmturner/goidentity.v3 | v3.0.0 | command/client/go.mod | |
gopkg.in/ory-am/dockertest.v3 | v3.3.4 | go.mod | |
gopkg.in/yaml.v2 | v2.4.0 | command/base/go.mod | |
gopkg.in/yaml.v3 | v3.0.1 | go.mod | |
k8s.io/api | v0.35.3 | go.mod | |
k8s.io/apimachinery | v0.35.3 | go.mod | |
k8s.io/client-go | v0.35.3 | go.mod | |
k8s.io/klog/v2 | v2.130.1 | go.mod | |
k8s.io/kube-openapi | v0.0.0-20250910181357-589584f1c912 | go.mod | |
k8s.io/utils | v0.0.0-20251002143259-bc988d571ff4 | command/client/go.mod | |
layeh.com/radius | v0.0.0-20231213012653-1006025d24f8 | go.mod | |
sigs.k8s.io/json | v0.0.0-20250730193827-2d320260d730 | go.mod | |
sigs.k8s.io/randfill | v1.0.0 | go.mod | |
sigs.k8s.io/structured-merge-diff/v6 | v6.3.0 | go.mod | |
sigs.k8s.io/yaml | v1.6.0 | go.mod | |
software.sslmate.com/src/go-pkcs12 | v0.7.2 | go.mod |
github (39)
| Name | Version | License | Declared in |
|---|---|---|---|
actions-ecosystem/action-remove-labels | v1.3.0 | .github/workflows/remove-labels.yml | |
actions/add-to-project | v2.0.0 | .github/workflows/oss.yml | |
actions/cache | v5.0.5 | .github/workflows/git-heatmap.yml | |
actions/cache | v6.1.0 | .github/actions/build-ui/action.yml | |
actions/cache/restore | v6.1.0 | .github/actions/install-tools/action.yml | |
actions/cache/save | v6.1.0 | .github/actions/install-tools/action.yml | |
actions/checkout | v7.0.0 | .github/workflows/git-heatmap.yml | |
actions/checkout | v7.0.1 | .github/actions/checkout/action.yml | |
actions/download-artifact | v8.0.1 | .github/workflows/build.yml | |
actions/github-script | v9.0.0 | .github/workflows/test-go.yml | |
actions/setup-go | v7.0.0 | .github/actions/set-up-go/action.yml | |
actions/setup-node | v7.0.0 | .github/actions/build-ui/action.yml | |
actions/setup-python | v7.0.0 | .github/workflows/security-scan.yml | |
actions/upload-artifact | v7.0.1 | .github/actions/build-vault/action.yml | |
aws-actions/configure-aws-credentials | v6.2.4 | .github/workflows/test-ci-bootstrap.yml | |
browser-actions/setup-chrome | v2.2.0 | .github/workflows/test-enos-scenario-ui.yml | |
docker/build-push-action | v7.3.0 | .github/actions/build-vault/action.yml | |
docker/setup-buildx-action | v4.3.0 | .github/actions/build-vault/action.yml | |
dorny/paths-filter | v4.0.3 | .github/workflows/oss.yml | |
github/codeql-action/upload-sarif | 3096afedf9873361b2b2f65e1445b13272c83eb8 | .github/workflows/security-scan.yml | |
hashicorp-forge/actions-pao-tool/collect | v1.1.0 | .github/workflows/build.yml | |
hashicorp-forge/actions-pao-tool/select-license | v1.1.0 | .github/actions/build-vault/action.yml | |
hashicorp/action-setup-enos | v1.54 | .github/actions/run-enos-scenario/action.yml | |
hashicorp/actions-docker-build | 4e0c63aad578fbc5d9dc5a88d108b8fc6253f769 | .github/actions/containerize/action.yml | |
hashicorp/actions-generate-metadata | v1.1.4 | .github/workflows/build.yml | |
hashicorp/actions-packaging-linux | e6d9687e13bd55b1b3e3e5adb2e4d52789299025 | .github/actions/build-vault/action.yml | |
hashicorp/actions-persist-metadata | v3 | .github/workflows/enos-release-testing-oss.yml | |
hashicorp/actions-set-product-version | v2.0.2 | .github/workflows/build.yml | |
hashicorp/actions-slack-status | v2.0.1 | .github/workflows/test-run-enos-scenario-matrix.yml | |
hashicorp/oss-core-library-dashboard-metrics/mend-security/actions/mend-pr-scan | main | .github/workflows/mend-pr-scan.yml | |
hashicorp/setup-copywrite | v1.1.3 | .github/workflows/copywrite.yml | |
hashicorp/setup-terraform | v4.0.1 | .github/actions/run-enos-scenario/action.yml | |
hashicorp/vault-action | v4.0.0 | .github/workflows/benchmark-prevent-performance-degradations.yml | |
peter-evans/create-pull-request | v8.1.1 | .github/workflows/ui-client-update.yml | |
peter-evans/repository-dispatch | v4.0.1 | .github/workflows/copy-external-contributor-pull-request-ce.yml | |
pnpm/action-setup | v6.0.10 | .github/workflows/test-enos-scenario-ui.yml | |
pnpm/action-setup | v6.0.9 | .github/actions/build-ui/action.yml | |
slackapi/slack-github-action | v4.0.0 | .github/workflows/build.yml | |
test-summary/action | v2.6 | .github/workflows/test-ui.yml |
unknown (24)
| Name | Version | License | Declared in |
|---|---|---|---|
./.github/actions/build-ui | UNKNOWN | .github/workflows/build.yml | |
./.github/actions/build-vault | UNKNOWN | .github/workflows/build-artifacts-ce.yml | |
./.github/actions/changed-files | UNKNOWN | .github/workflows/build.yml | |
./.github/actions/checkout | UNKNOWN | .github/workflows/build.yml | |
./.github/actions/containerize | UNKNOWN | .github/actions/build-vault/action.yml | |
./.github/actions/create-dynamic-config | UNKNOWN | .github/workflows/test-run-enos-scenario-matrix.yml | |
./.github/actions/install-tools | UNKNOWN | .github/actions/build-vault/action.yml | |
./.github/actions/metadata | UNKNOWN | .github/workflows/benchmark-prevent-performance-degradations.yml | |
./.github/actions/run-apupgrade-tests | UNKNOWN | .github/workflows/ci.yml | |
./.github/actions/run-enos-scenario | UNKNOWN | .github/workflows/test-run-enos-scenario-containers.yml | |
./.github/actions/set-up-go | UNKNOWN | .github/actions/build-vault/action.yml | |
./.github/actions/set-up-gvisor | UNKNOWN | .github/workflows/test-go.yml | |
./.github/actions/set-up-pipeline | UNKNOWN | .github/actions/changed-files/action.yml | |
./.github/actions/set-up-pnpm | UNKNOWN | .github/workflows/test-ui.yml | |
./.github/workflows/build-artifacts-ce.yml | UNKNOWN | .github/workflows/build.yml | |
./.github/workflows/build-artifacts-ent.yml | UNKNOWN | .github/workflows/build.yml | |
./.github/workflows/build-hcp-image.yml | UNKNOWN | .github/workflows/build.yml | |
./.github/workflows/test-go.yml | UNKNOWN | .github/workflows/ci.yml | |
./.github/workflows/test-run-acc-tests-for-path.yml | UNKNOWN | .github/workflows/test-acc-dockeronly-nightly.yml | |
./.github/workflows/test-run-enos-scenario-cloud.yml | UNKNOWN | .github/workflows/build.yml | |
./.github/workflows/test-run-enos-scenario-containers.yml | UNKNOWN | .github/workflows/build.yml | |
./.github/workflows/test-run-enos-scenario-matrix.yml | UNKNOWN | .github/workflows/build.yml | |
./.github/workflows/test-ui.yml | UNKNOWN | .github/workflows/ci.yml | |
./security-scanner | UNKNOWN | .github/workflows/security-scan.yml |
History
| Week | Version | Dependencies | Critical | High | Medium | Low | Unknown | Changes |
|---|---|---|---|---|---|---|---|---|
| 2026-11-02 | v2.2.1 | 650 | 0 | 12 | 9 | 0 | 4 | −1 |
| 2026-11-01 | v2.2.1 | 651 | 0 | 12 | 9 | 0 | 4 | — |
SBOM minimum elements
Scored by sbomlyze on the generated source SBOM. A source SBOM usually lacks supplier and hash data, so these scores mostly reflect what the project's manifests declare.
| Standard | Score | Checks passed | Failed checks |
|---|---|---|---|
| NTIA 2021 | 71 | 5/7 | Supplier Name, Dependency Relationship |
| CISA 2025 | 50 | 5/10 | Software Producer, Dependency Relationship, License Information, Component Hash, SBOM Author |
| BSI TR-03183 | 44 | 4/9 | Component Creator, Distribution Licences, SHA-512 Hash, Dependency Relationship, SBOM Creator Contact |
Evidence
Downloads for this week: CycloneDX SBOM · Grype report · sbomlyze diff from last week
Permanent copy of the raw SBOM, Grype, OSV-Scanner, and govulncheck output and release checks: release report-2026-11-02, folder supply-chain-shard-*/hashicorp__vault/.
96 manifests and lockfiles scanned
.github/actions/build-ui/action.yml, .github/actions/build-vault/action.yml, .github/actions/changed-files/action.yml, .github/actions/checkout/action.yml, .github/actions/containerize/action.yml, .github/actions/create-dynamic-config/action.yml, .github/actions/install-tools/action.yml, .github/actions/metadata/action.yml, .github/actions/run-enos-scenario/action.yml, .github/actions/set-up-go/action.yml, .github/actions/set-up-gvisor/action.yml, .github/actions/set-up-pipeline/action.yml, .github/actions/set-up-pnpm/action.yml, .github/workflows/actionlint.yml, .github/workflows/add-hashicorp-contributed-label.yml, .github/workflows/benchmark-prevent-performance-degradations.yml, .github/workflows/bob-review-approval-gate.yml, .github/workflows/bob-review-gate.yml, .github/workflows/build-artifacts-ce.yml, .github/workflows/build-artifacts-ent.yml, .github/workflows/build-hcp-image.yml, .github/workflows/build.yml, .github/workflows/changelog-checker.yml, .github/workflows/ci.yml, .github/workflows/code-checker.yml, .github/workflows/copy-external-contributor-pull-request-ce.yml, .github/workflows/copywrite.yml, .github/workflows/do-not-merge-checker.yml, .github/workflows/enos-lint.yml, .github/workflows/enos-release-testing-oss.yml, .github/workflows/git-heatmap.yml, .github/workflows/mend-pr-scan.yml, .github/workflows/milestone-checker.yml, .github/workflows/oss.yml, .github/workflows/plugin-update-check.yml, .github/workflows/plugin-update.yml, .github/workflows/remove-labels.yml, .github/workflows/security-scan.yml, .github/workflows/test-acc-dockeronly-nightly.yml, .github/workflows/test-ci-bootstrap.yml, .github/workflows/test-ci-cleanup.yml, .github/workflows/test-enos-scenario-ui.yml, .github/workflows/test-go.yml, .github/workflows/test-run-acc-tests-for-path.yml, .github/workflows/test-run-enos-scenario-cloud.yml, .github/workflows/test-run-enos-scenario-containers.yml, .github/workflows/test-run-enos-scenario-matrix.yml, .github/workflows/test-run-enos-scenario.yml, .github/workflows/test-ui.yml, .github/workflows/ui-client-update.yml, api/auth/approle/go.mod, api/auth/approle/go.sum, api/auth/aws/go.mod, api/auth/aws/go.sum, api/auth/azure/go.mod, api/auth/azure/go.sum, api/auth/cert/go.mod, api/auth/cert/go.sum, api/auth/gcp/go.mod, api/auth/gcp/go.sum, api/auth/kubernetes/go.mod, api/auth/kubernetes/go.sum, api/auth/ldap/go.mod, api/auth/ldap/go.sum, api/auth/userpass/go.mod, api/auth/userpass/go.sum, api/go.mod, api/go.sum, command/base/go.mod, command/base/go.sum, command/client/go.mod, command/client/go.sum, go.mod, go.sum, internalshared/go.mod, internalshared/go.sum, sdk/go.mod, sdk/go.sum, tools/pipeline/go.mod, tools/pipeline/go.sum, ui/lib/config-ui/package.json, ui/lib/core/package.json, ui/lib/keep-gitkeep/package.json, ui/lib/kmip/package.json, ui/lib/kubernetes/package.json, ui/lib/kv/package.json, ui/lib/ldap/package.json, ui/lib/open-api-explorer/package.json, ui/lib/pki/package.json, ui/lib/replication/package.json, ui/lib/service-worker-authenticated-download/package.json, ui/lib/sync/package.json, ui/package.json, ui/pnpm-lock.yaml, version/go.mod, version/go.sum
Full JSON for this project · Atom feed of weekly changes
Badges
shields.io endpoints refreshed with each weekly scan. They report this week's result for the latest release, nothing more.
[](https://rezmoss.github.io/awesome-security-pipeline/projects/hashicorp/vault/index.html)How this report is made
Every Sunday a GitHub Actions workflow resolves each catalog tool to its latest release and runs the checks below. Every tool is installed from its own latest release and verified against its published checksum or digest. Nothing from the scanned projects is built or executed; release binaries are analyzed as files.
| Tool | What it does here | Version this week |
|---|---|---|
| Syft | Generates a CycloneDX SBOM from each release's manifests and lockfiles. | 1.55.0 |
| Grype | Matches the SBOM against known vulnerabilities. | 0.121.0 |
| OSV-Scanner | Checks the same files against the OSV database to confirm or add matches. | 2.7.0 |
| govulncheck | For Go tools, finds which advisories have vulnerable code compiled into the released Linux binary. | 1.9.0 |
| zizmor | Audits the project's GitHub Actions workflows for injection, unpinned actions, and excessive permissions. | 1.31.1 |
| OpenSSF Scorecard | Scores repository security practices such as code review, branch protection, and pinned dependencies. | 5.6.0 |
| Cosign | Verifies Sigstore signatures on the release binary or its checksums file. | 3.1.4 |
| slsa-verifier | Verifies SLSA build provenance published with the release. | 2.7.1 |
| GitHub CLI attestations | Verifies GitHub artifact attestations for the release binary. | — |
| sbomlyze | Diffs each SBOM against last week and scores NTIA, CISA, and BSI minimum elements. Maintained by this repository's maintainer. | 0.6.0 |