critical
CVE-2026-45570
github.com/go-git/go-git: go-git: Shell command injection in SSH transport
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
GHSA2.3CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L
Red Hat6.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (medium), GHSA (low), Azure Linux (low).
Description
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single quotes embedded inside the path. A repository path containing a single quote can therefore break out of the quoted region in the exec command and be appended as additional shell tokens. This vulnerability is fixed in 5.19.1 and 6.0.0-alpha.4.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | packer | 0:1.9.5-17.azl3 |
| chainguard | act, amazon-ssm-agent, amazon-ssm-agent-fips and 178 more | 0.2.88-r4 and 155 more |
| debian 12 | golang-github-go-git-go-git | no fix listed |
| debian 13 | golang-github-go-git-go-git | no fix listed |
| debian 14 | golang-github-go-git-go-git, golang-github-go-git-go-git-v6 | 5.19.1-1 and 1 more |
| echo | golang-github-go-git-go-git | no fix listed |
| go::GitHub Security Advisory Go | github.com/go-git/go-git, github.com/go-git/go-git/v5, github.com/go-git/go-git/v6 | 5.19.1 and 1 more |
| minimos | argo-events, argo-events-fips, argo-workflow-executor-3.7 and 100 more | 1.9.10-r13 and 67 more |
| rapidfort debian 12 | golang-github-go-git-go-git | 0:5.19.1-1 |
| rapidfort debian 13 | golang-github-go-git-go-git | 0:5.19.1-1 |
| wolfi | act, apko, argo-cd-3.2 and 67 more | 0.2.88-r4 and 69 more |
Show all 365 entries from 11 sources
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | packer | 0:1.9.5-17.azl3 |
| chainguard | act | 0.2.88-r4 |
| chainguard | amazon-ssm-agent | 3.3.4364.0-r2 |
| chainguard | amazon-ssm-agent-fips | 3.3.4515.0-r1 |
| chainguard | apko | 1.2.13-r1 |
| chainguard | apko-fips | 1.2.13-r1 |
| chainguard | argo-cd-3.1 | 3.1.16-r3 |
| chainguard | argo-cd-3.2 | 3.2.12-r1 |
| chainguard | argo-cd-3.3 | 3.3.14-r9 |
| chainguard | argo-cd-3.4 | 3.4.2-r2 |
| chainguard | argo-cd-fips-3.1 | 3.1.16-r1 |
| chainguard | argo-cd-fips-3.2 | 3.2.12-r4 |
| chainguard | argo-cd-fips-3.3 | 3.3.10-r4 |
| chainguard | argo-cd-fips-3.4 | 3.4.2-r4 |
| chainguard | argo-events | 1.9.10-r22 |
| chainguard | argo-events-fips | 1.9.10-r16 |
| chainguard | argo-workflows-3.7 | 3.7.14-r4 |
| chainguard | argo-workflows-4.0 | 4.0.5-r5 |
| chainguard | argo-workflows-fips-3.7 | 3.7.14-r4 |
| chainguard | argo-workflows-fips-4.0 | 4.0.5-r5 |
| chainguard | argocd-image-updater | 1.2.1-r1 |
| chainguard | argocd-image-updater-fips | 1.2.0-r6 |
| chainguard | bom | 0.7.1-r20 |
| chainguard | cerbos | 0.53.0-r4 |
| chainguard | cerbos-fips | 0.53.0-r2 |
| chainguard | cg | 0.2.263-r1 |
| chainguard | chainctl | 0.2.264-r1 |
| chainguard | chainctl-fips | 0.2.263-r1 |
| chainguard | chainloop-cli | 1.98.2-r1 |
| chainguard | chainloop-cli-fips | 1.98.2-r1 |
| chainguard | cloudbeat-8.17 | 8.17.10-r20 |
| chainguard | cloudbeat-8.19 | 8.19.15-r3 |
| chainguard | cloudbeat-9.0 | 9.0.8-r23 |
| chainguard | cloudbeat-9.1 | 9.1.10-r16 |
| chainguard | cloudbeat-9.2 | 9.2.8-r3 |
| chainguard | cloudbeat-9.3 | 9.3.4-r5 |
| chainguard | cloudbeat-9.4 | 9.4.1-r1 |
| chainguard | cloudbeat-fips-8.17 | 8.17.10-r25 |
| chainguard | cloudbeat-fips-8.19 | 8.19.15-r1 |
| chainguard | cloudbeat-fips-9.0 | 9.0.8-r26 |
| chainguard | cloudbeat-fips-9.1 | 9.1.10-r19 |
| chainguard | cloudbeat-fips-9.2 | 9.2.8-r3 |
| chainguard | cloudbeat-fips-9.3 | 9.3.4-r4 |
| chainguard | cloudbeat-fips-9.4 | 9.4.1-r1 |
| chainguard | coder | 2.32.4-r2 |
| chainguard | coder-fips | 2.32.4-r1 |
| chainguard | crossplane-1.20 | 1.20.7-r4 |
| chainguard | crossplane-2.0 | 2.0.8-r3 |
| chainguard | crossplane-2.1 | 2.1.5-r4 |
| chainguard | crossplane-2.2 | 2.2.1-r3 |
| chainguard | crossplane-fips-1.20 | 1.20.7-r4 |
| chainguard | crossplane-fips-2.0 | 2.0.8-r3 |
| chainguard | crossplane-fips-2.1 | 2.1.5-r4 |
| chainguard | crossplane-fips-2.2 | 2.2.1-r4 |
| chainguard | dagger | 0.20.8-r6 |
| chainguard | external-secrets-operator-2.0 | 2.0.1-r12 |
| chainguard | external-secrets-operator-2.1 | 2.1.0-r12 |
| chainguard | external-secrets-operator-2.2 | 2.2.0-r10 |
| chainguard | external-secrets-operator-2.3 | 2.3.0-r8 |
| chainguard | external-secrets-operator-2.4 | 2.4.1-r5 |
| chainguard | external-secrets-operator-2.5 | 2.5.0-r1 |
| chainguard | external-secrets-operator-fips-2.0 | 2.0.1-r12 |
| chainguard | external-secrets-operator-fips-2.1 | 2.1.0-r11 |
| chainguard | external-secrets-operator-fips-2.2 | 2.2.0-r10 |
| chainguard | external-secrets-operator-fips-2.3 | 2.3.0-r6 |
| chainguard | external-secrets-operator-fips-2.4 | 2.4.1-r3 |
| chainguard | external-secrets-operator-fips-2.5 | 2.5.0-r1 |
| chainguard | flux-2.5 | 2.5.1-r26 |
| chainguard | flux-2.6 | 2.6.4-r25 |
| chainguard | flux-2.7 | 2.7.5-r18 |
| chainguard | flux-2.8 | 2.8.8-r0 |
| chainguard | flux-fips-2.5 | 2.5.1-r24 |
| chainguard | flux-fips-2.6 | 2.6.4-r22 |
| chainguard | flux-fips-2.7 | 2.7.5-r19 |
| chainguard | flux-fips-2.8 | 2.8.8-r0 |
| chainguard | flux-image-automation-controller | 1.1.4-r0 |
| chainguard | flux-image-automation-controller-fips | 1.1.4-r0 |
| chainguard | gitaly-18.10 | 18.10.6-r3 |
| chainguard | gitaly-18.11 | 18.11.4-r1 |
| chainguard | gitaly-18.9 | 18.9.7-r3 |
| chainguard | gitaly-fips-18.10 | 18.10.6-r1 |
| chainguard | gitaly-fips-18.11 | 18.11.3-r1 |
| chainguard | gitaly-fips-18.9 | 18.9.7-r1 |
| chainguard | gitea | 1.26.2-r0 |
| chainguard | gitea-fips | 1.26.2-r1 |
| chainguard | gitlab-rails-ce-18.10 | 18.10.6-r3 |
| chainguard | gitlab-rails-ce-18.11 | 18.11.3-r3 |
| chainguard | gitlab-rails-ce-19.0 | 19.0.4-r3 |
| chainguard | gitlab-rails-ce-19.1 | 19.1.2-r3 |
| chainguard | gitlab-rails-ce-fips-18.1 | 18.1.6-r13 |
| chainguard | gitlab-rails-ce-fips-18.10 | 18.10.6-r2 |
| chainguard | gitlab-rails-ce-fips-18.11 | 18.11.3-r4 |
| chainguard | gitlab-rails-ce-fips-18.9 | 18.9.7-r2 |
| chainguard | gitlab-rails-ce-fips-19.0 | 19.0.4-r1 |
| chainguard | gitlab-rails-ce-fips-19.1 | 19.1.2-r2 |
| chainguard | gitlab-runner-18.10 | 18.10.1-r9 |
| chainguard | gitlab-runner-18.11 | 18.11.3-r2 |
| chainguard | gitlab-runner-18.9 | 18.9.0-r13 |
| chainguard | gitlab-runner-fips-18.10 | 18.10.1-r10 |
| chainguard | gitlab-runner-fips-18.11 | 18.11.3-r5 |
| chainguard | gitsign | 0.16.0-r4 |
| chainguard | gomplate-4 | 4.3.3-r15 |
| chainguard | gomplate-5 | 5.1.0-r4 |
| chainguard | gomplate-fips-4 | 4.3.3-r14 |
| chainguard | gomplate-fips-5 | 5.1.0-r4 |
| chainguard | google-osconfig-agent | 20251028.00-r18 |
| chainguard | goreleaser | 2.15.4-r5 |
| chainguard | gptscript | 0.9.9-r156 |
| chainguard | grafana-12.1 | 12.1.10.01-r16 |
| chainguard | grafana-alloy | 1.16.1-r1 |
| chainguard | grafana-alloy-fips | 1.16.1-r1 |
| chainguard | grafana-fips-12.1 | 12.1.10.01-r6 |
| chainguard | grype | 0.112.0-r3 |
| chainguard | grype-db | 0.53.3-r3 |
| chainguard | grype-fips | 0.112.0-r3 |
| chainguard | guac | 1.1.0-r16 |
| chainguard | jfrog-cli | 2.104.0-r1 |
| chainguard | k9s | 0.50.18-r25 |
| chainguard | k9s-fips | 0.50.18-r19 |
| chainguard | kaniko | 1.25.15-r1 |
| chainguard | kaniko-fips | 1.25.15-r1 |
| chainguard | kargo | 1.10.4-r1 |
| chainguard | kots | 1.130.4-r2 |
| chainguard | kubescape | 4.0.8-r4 |
| chainguard | kubescape-server | 4.0.8-r5 |
| chainguard | kubescape-server-fips | 4.0.8-r5 |
| chainguard | kubevela | 1.10.8-r7 |
| chainguard | kubevela-fips | 1.10.8-r8 |
| chainguard | kyverno-1.15 | 1.15.3-r19 |
| chainguard | kyverno-1.16 | 1.16.4-r5 |
| chainguard | kyverno-1.17 | 1.17.2-r35 |
| chainguard | kyverno-1.18 | 1.18.1-r1 |
| chainguard | kyverno-fips-1.15 | 1.15.20-r5 |
| chainguard | kyverno-fips-1.16 | 1.16.4-r4 |
| chainguard | kyverno-fips-1.17 | 1.17.2-r5 |
| chainguard | kyverno-fips-1.18 | 1.18.1-r1 |
| chainguard | mapotf | 0.0.0_git20260426-r3 |
| chainguard | mapotf-fips | 0.0.0_git20260426-r2 |
| chainguard | melange | 0.50.7-r1 |
| chainguard | nemo | 2.7.3-r6 |
| chainguard | nfpm | 2.46.3-r3 |
| chainguard | nuclei | 3.8.0-r7 |
| chainguard | osv-scanner | 2.3.8-r2 |
| chainguard | packer | 1.15.3-r5 |
| chainguard | packer-fips | 1.15.3-r4 |
| chainguard | pulumi | 3.243.0-r0 |
| chainguard | pulumi-kubernetes-operator | 2.7.0-r6 |
| chainguard | pulumi-language-dotnet | 3.106.2-r2 |
| chainguard | pulumi-language-java | 1.28.0-r1 |
| chainguard | pulumi-language-yaml | 1.34.0-r2 |
| chainguard | rancher-fleet | 0.15.2-r0 |
| chainguard | rancher-fleet-fips | 0.15.1-r4 |
| chainguard | redpanda-console | 3.7.3-r0 |
| chainguard | scorecard | 5.5.0-r5 |
| chainguard | skaffold | 2.20.0-r1 |
| chainguard | skaffold-fips | 2.20.0-r1 |
| chainguard | snyk-cli | 1.1304.3-r3 |
| chainguard | src-fingerprint | 0.19.0-r51 |
| chainguard | src-fingerprint-fips | 0.19.0-r34 |
| chainguard | steampipe | 2.4.3-r1 |
| chainguard | syft | 1.44.0-r4 |
| chainguard | syft-fips | 1.44.0-r3 |
| chainguard | teleport-17 | 17.7.24-r0 |
| chainguard | teleport-18 | 18.8.2-r0 |
| chainguard | teleport-18.6 | 18.6.8-r20 |
| chainguard | terragrunt | 1.1.0-r0 |
| chainguard | terragrunt-fips | 1.1.0-r0 |
| chainguard | tfsec | 1.28.14-r34 |
| chainguard | trivy | 0.70.0-r0 |
| chainguard | trivy-fips | 0.69.3-r10 |
| chainguard | trivy-operator | 0.30.1-r10 |
| chainguard | trivy-operator-fips | 0.30.1-r8 |
| chainguard | trufflehog | 3.94.3-r8 |
| chainguard | trufflehog-fips | 3.94.3-r6 |
| chainguard | upwind-agent | 0.130.0-r0 |
| chainguard | witness | 0.11.0-r4 |
| chainguard | wolfictl | 0.39.16-r1 |
| chainguard | xeol | 0.10.8-r40 |
| chainguard | xeol-fips | 0.10.8-r40 |
| chainguard | zarf | 0.76.0-r1 |
| chainguard | zarf-fips | 0.75.1-r5 |
| chainguard | zot | 2.1.17-r1 |
| debian 12 | golang-github-go-git-go-git | no fix listed |
| debian 13 | golang-github-go-git-go-git | no fix listed |
| debian 14 | golang-github-go-git-go-git | 5.19.1-1 |
| debian 14 | golang-github-go-git-go-git-v6 | 6.0.0~alpha4-1 |
| echo | golang-github-go-git-go-git | no fix listed |
| go::GitHub Security Advisory Go | github.com/go-git/go-git | no fix listed |
| go::GitHub Security Advisory Go | github.com/go-git/go-git/v5 | 5.19.1 |
| go::GitHub Security Advisory Go | github.com/go-git/go-git/v6 | 6.0.0-alpha.4 |
| minimos | argo-events | 1.9.10-r13 |
| minimos | argo-events-fips | 1.9.10-r14 |
| minimos | argo-workflow-executor-3.7 | 3.7.15-r0 |
| minimos | argo-workflow-executor-4.0 | 4.0.6-r0 |
| minimos | argo-workflow-executor-fips-3.7 | 3.7.15-r0 |
| minimos | argo-workflow-executor-fips-4.0 | 4.0.6-r0 |
| minimos | argo-workflows-3.7 | 3.7.15-r0 |
| minimos | argo-workflows-4.0 | 4.0.6-r0 |
| minimos | argo-workflows-fips-3.7 | 3.7.15-r0 |
| minimos | argo-workflows-fips-4.0 | 4.0.6-r0 |
| minimos | argocd-3.3 | 3.3.12-r2 |
| minimos | argocd-3.4 | 3.4.5-r2 |
| minimos | argocd-fips-3.3 | 3.3.12-r1 |
| minimos | argocd-fips-3.4 | 3.4.5-r2 |
| minimos | argocd-image-updater-fips-1.2 | 1.2.2-r2 |
| minimos | cerbos | 0.54.0-r0 |
| minimos | cerbos-fips | 0.54.0-r0 |
| minimos | cloud-query-db-0.12 | 0.12.28-r1 |
| minimos | cloud-query-db-0.12-fips | 0.12.29-r1 |
| minimos | crossplane | 2.2.2-r0 |
| minimos | datadog-agent | 7.65.1-r0 |
| minimos | external-secrets-operator | 2.7.0-r0 |
| minimos | external-secrets-operator-fips | 2.7.0-r0 |
| minimos | flux-cli-2.8 | 2.8.8-r0 |
| minimos | flux-cli-2.8-fips | 2.8.8-r0 |
| minimos | gitaly-19.1 | 19.1.1-r1 |
| minimos | gitaly-fips-19.1 | 19.1.1-r1 |
| minimos | gitea | 1.26.4-r1 |
| minimos | gitea-fips | 1.26.4-r1 |
| minimos | gitlab-runner-18.11 | 18.11.3-r3 |
| minimos | gitlab-runner-19.0 | 19.0.1-r3 |
| minimos | gitlab-runner-19.1 | 19.1.0-r1 |
| minimos | gitlab-runner-fips-18.11 | 18.11.3-r3 |
| minimos | gitlab-runner-fips-19.0 | 19.0.1-r3 |
| minimos | gitlab-runner-fips-19.1 | 19.1.0-r1 |
| minimos | gomplate | 5.1.0-r3 |
| minimos | gomplate-fips | 5.1.0-r3 |
| minimos | grafana-alloy | 1.17.0-r0 |
| minimos | grafana-alloy-fips | 1.17.0-r0 |
| minimos | grype | 0.113.0-r0 |
| minimos | grype-fips | 0.113.0-r0 |
| minimos | kyverno-1.16 | 1.16.4-r5 |
| minimos | kyverno-1.17 | 1.17.2-r6 |
| minimos | kyverno-1.18 | 1.18.2-r1 |
| minimos | kyverno-fips-1.16 | 1.16.4-r5 |
| minimos | kyverno-fips-1.17 | 1.17.2-r6 |
| minimos | kyverno-fips-1.18 | 1.18.2-r1 |
| minimos | livekit-cli | 2.16.1-r0 |
| minimos | livekit-cli-fips | 2.16.1-r0 |
| minimos | paketo-buildpacks-bundle-install | 0.9.10-r0 |
| minimos | paketo-buildpacks-bundler | 0.9.11-r0 |
| minimos | paketo-buildpacks-conda-env-update | 0.8.26-r0 |
| minimos | paketo-buildpacks-cpython | 1.18.29-r0 |
| minimos | paketo-buildpacks-dotnet-core-aspnet-runtime | 1.6.26-r0 |
| minimos | paketo-buildpacks-dotnet-core-sdk | 1.6.27-r0 |
| minimos | paketo-buildpacks-dotnet-execute | 1.2.28-r0 |
| minimos | paketo-buildpacks-dotnet-publish | 1.2.24-r0 |
| minimos | paketo-buildpacks-go-build | 2.4.26-r0 |
| minimos | paketo-buildpacks-go-build-2.4.20 | 2.4.20-r1 |
| minimos | paketo-buildpacks-go-dist | 2.10.15-r0 |
| minimos | paketo-buildpacks-go-dist-2.10.9 | 2.10.9-r1 |
| minimos | paketo-buildpacks-go-mod-vendor | 1.1.26-r0 |
| minimos | paketo-buildpacks-go-mod-vendor-1.1.21 | 1.1.21-r1 |
| minimos | paketo-buildpacks-httpd | 1.0.6-r0 |
| minimos | paketo-buildpacks-icu | 0.9.27-r0 |
| minimos | paketo-buildpacks-jam | 2.18.0-r0 |
| minimos | paketo-buildpacks-miniconda | 0.11.26-r0 |
| minimos | paketo-buildpacks-mri | 1.1.12-r0 |
| minimos | paketo-buildpacks-nginx | 1.0.28-r0 |
| minimos | paketo-buildpacks-node-engine | 8.1.3-r0 |
| minimos | paketo-buildpacks-npm-install | 2.3.20-r0 |
| minimos | paketo-buildpacks-passenger | 0.14.23-r0 |
| minimos | paketo-buildpacks-pip | 0.26.16-r0 |
| minimos | paketo-buildpacks-pip-install | 0.7.29-r0 |
| minimos | paketo-buildpacks-pipenv | 1.28.4-r0 |
| minimos | paketo-buildpacks-pipenv-install | 0.7.28-r0 |
| minimos | paketo-buildpacks-poetry | 0.17.6-r0 |
| minimos | paketo-buildpacks-poetry-install | 0.6.34-r0 |
| minimos | paketo-buildpacks-vsdbg | 0.6.27-r0 |
| minimos | paketo-buildpacks-yarn | 2.2.32-r0 |
| minimos | paketo-buildpacks-yarn-install | 2.7.14-r0 |
| minimos | plural-cli | 0.12.52-r0 |
| minimos | plural-cli-fips | 0.12.52-r0 |
| minimos | pulumi-kubernetes-operator | 2.7.0-r1 |
| minimos | pulumi-kubernetes-operator-fips | 2.7.0-r1 |
| minimos | teleport-17 | 17.7.24-r0 |
| minimos | teleport-18 | 18.8.2-r0 |
| minimos | teleport-fips-17 | 17.7.24-r0 |
| minimos | teleport-fips-18 | 18.8.2-r0 |
| minimos | terragrunt | 1.1.0-r0 |
| minimos | terragrunt-fips | 1.1.0-r0 |
| minimos | trufflehog | 3.95.6-r1 |
| minimos | trufflehog-fips | 3.95.6-r1 |
| minimos | vela-cli-1.10 | 1.10.9-r1 |
| minimos | vela-cli-1.11 | 1.11.0-r1 |
| minimos | vela-cli-fips-1.10 | 1.10.9-r1 |
| minimos | vela-cli-fips-1.11 | 1.11.0-r1 |
| minimos | vela-core-1.10 | 1.10.9-r1 |
| minimos | vela-core-1.11 | 1.11.0-r1 |
| minimos | vela-core-fips-1.10 | 1.10.9-r1 |
| minimos | vela-core-fips-1.11 | 1.11.0-r1 |
| minimos | zot | 2.1.17-r1 |
| minimos | zot-fips | 2.1.17-r1 |
| rapidfort debian 12 | golang-github-go-git-go-git | 0:5.19.1-1 |
| rapidfort debian 13 | golang-github-go-git-go-git | 0:5.19.1-1 |
| wolfi | act | 0.2.88-r4 |
| wolfi | apko | 1.2.13-r1 |
| wolfi | argo-cd-3.2 | 3.2.12-r1 |
| wolfi | argo-cd-3.3 | 3.3.14-r9 |
| wolfi | argo-cd-3.4 | 3.4.2-r2 |
| wolfi | argo-events | 1.9.10-r22 |
| wolfi | argo-workflows-3.7 | 3.7.14-r4 |
| wolfi | argo-workflows-4.0 | 4.0.5-r5 |
| wolfi | argocd-image-updater | 1.2.1-r1 |
| wolfi | bom | 0.7.1-r20 |
| wolfi | cerbos | 0.53.0-r4 |
| wolfi | crossplane-2.2 | 2.2.1-r3 |
| wolfi | dagger | 0.20.8-r6 |
| wolfi | external-secrets-operator-2.1 | 2.1.0-r12 |
| wolfi | external-secrets-operator-2.2 | 2.2.0-r10 |
| wolfi | external-secrets-operator-2.3 | 2.3.0-r8 |
| wolfi | external-secrets-operator-2.4 | 2.4.1-r5 |
| wolfi | external-secrets-operator-2.5 | 2.5.0-r1 |
| wolfi | flux-2.7 | 2.7.5-r18 |
| wolfi | flux-2.8 | 2.8.8-r0 |
| wolfi | flux-image-automation-controller | 1.1.4-r0 |
| wolfi | gitaly-18.10 | 18.10.6-r3 |
| wolfi | gitaly-18.11 | 18.11.4-r1 |
| wolfi | gitaly-18.9 | 18.9.7-r3 |
| wolfi | gitea | 1.26.2-r0 |
| wolfi | gitlab-runner-18.10 | 18.10.1-r9 |
| wolfi | gitlab-runner-18.11 | 18.11.3-r2 |
| wolfi | gitlab-runner-18.9 | 18.9.0-r13 |
| wolfi | gitsign | 0.16.0-r4 |
| wolfi | gomplate-5 | 5.1.0-r4 |
| wolfi | goreleaser | 2.15.4-r5 |
| wolfi | gptscript | 0.9.9-r156 |
| wolfi | grafana-alloy | 1.16.1-r1 |
| wolfi | grype | 0.112.0-r3 |
| wolfi | guac | 1.1.0-r16 |
| wolfi | k9s | 0.50.18-r25 |
| wolfi | kaniko | 1.25.15-r1 |
| wolfi | kargo | 1.10.4-r1 |
| wolfi | kots | 1.130.4-r2 |
| wolfi | kubescape | 4.0.8-r4 |
| wolfi | kubevela | 1.10.8-r7 |
| wolfi | kyverno-1.17 | 1.17.2-r35 |
| wolfi | kyverno-1.18 | 1.18.1-r1 |
| wolfi | melange | 0.50.7-r1 |
| wolfi | nfpm | 2.46.3-r3 |
| wolfi | nuclei | 3.8.0-r7 |
| wolfi | osv-scanner | 2.3.8-r2 |
| wolfi | pulumi | 3.243.0-r0 |
| wolfi | pulumi-kubernetes-operator | 2.7.0-r6 |
| wolfi | pulumi-language-dotnet | 3.106.2-r2 |
| wolfi | pulumi-language-java | 1.28.0-r1 |
| wolfi | pulumi-language-yaml | 1.34.0-r2 |
| wolfi | rancher-fleet | 0.15.2-r0 |
| wolfi | scorecard | 5.5.0-r5 |
| wolfi | skaffold | 2.20.0-r1 |
| wolfi | snyk-cli | 1.1304.3-r3 |
| wolfi | src-fingerprint | 0.19.0-r51 |
| wolfi | steampipe | 2.4.3-r1 |
| wolfi | syft | 1.44.0-r4 |
| wolfi | teleport-18.6 | 18.6.8-r20 |
| wolfi | terragrunt | 1.1.0-r0 |
| wolfi | tfsec | 1.28.14-r34 |
| wolfi | trivy | 0.70.0-r0 |
| wolfi | trivy-operator | 0.30.1-r10 |
| wolfi | trufflehog | 3.94.3-r8 |
| wolfi | witness | 0.11.0-r4 |
| wolfi | wolfictl | 0.39.16-r1 |
| wolfi | xeol | 0.10.8-r40 |
| wolfi | zarf | 0.76.0-r1 |
| wolfi | zot | 2.1.17-r1 |