{"schema_version":"1.7.3","id":"CGA-8784-5948-h3qw","published":"2026-01-29T00:44:53.382703Z","modified":"2026-09-07T02:03:35.871145873Z","withdrawn":"2026-09-07T02:03:35.871145595Z","related":["CVE-2024-47534","GHSA-4f8r-qqr9-fq8j","GO-2024-3166"],"affected":[{"package":{"name":"aactl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r37"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"apko","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apko"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.20-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"chainctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/chainctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.59-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"cosign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"cosign-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"docker-credential-cgr","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/docker-credential-cgr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.59-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"falcoctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falcoctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"falcoctl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falcoctl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"flux-source-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"flux-source-controller-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"flux-source-controller-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gh","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.83.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gh-doc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gh-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.83.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gitsign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitsign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gitsign-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitsign-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gitsign-credential-cache","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitsign-credential-cache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kubescape","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubescape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.18-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-background-controller-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-background-controller-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-background-controller-fips-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-background-controller-fips-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-cleanup-controller-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-cleanup-controller-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-cleanup-controller-fips-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-cleanup-controller-fips-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-cli-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-cli-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-cli-fips-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-cli-fips-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-fips-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-fips-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-init-container-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-init-container-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-init-container-fips-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-init-container-fips-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-reports-controller-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-reports-controller-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-reports-controller-fips-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-reports-controller-fips-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"melange","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/melange"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.32.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"neuvector-sigstore-interface","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neuvector-sigstore-interface"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0_git20250629-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"neuvector-sigstore-interface-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neuvector-sigstore-interface-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0_git20251020-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-tester","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller-tester"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-tester-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller-tester-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-webhook","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller-webhook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-backfill-index","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-backfill-index"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-backfill-redis","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-backfill-redis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-fips-backfill-index","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-fips-backfill-index"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-fips-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-fips-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-fips-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-fips-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-cloudsqlproxy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-cloudsqlproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-createctconfig","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-ctlog-createctconfig"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-managectroots","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-ctlog-managectroots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-verifyfulcio","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-ctlog-verifyfulcio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-cloudsqlproxy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-cloudsqlproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-ctlog-createctconfig","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-ctlog-createctconfig"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-ctlog-managectroots","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-ctlog-managectroots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-ctlog-verifyfulcio","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-ctlog-verifyfulcio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-fulcio-createcerts","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-fulcio-createcerts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-getoidctoken","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-getoidctoken"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-rekor-createsecret","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-rekor-createsecret"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-trillian-createdb","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-trillian-createdb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-trillian-createtree","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-trillian-createtree"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-trillian-updatetree","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-trillian-updatetree"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-tsa-createcertchain","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-tsa-createcertchain"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-tuf-createsecret","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-tuf-createsecret"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-tuf-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-tuf-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fulcio-createcerts","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fulcio-createcerts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-getoidctoken","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-getoidctoken"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-rekor-createsecret","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-rekor-createsecret"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-trillian-createdb","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-trillian-createdb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-trillian-createtree","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-trillian-createtree"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-trillian-updatetree","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-trillian-updatetree"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-tsa-createcertchain","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-tsa-createcertchain"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-tuf-createsecret","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-tuf-createsecret"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-tuf-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-tuf-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-agent-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-agent-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-oidc-discovery-provider","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-oidc-discovery-provider"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-oidc-discovery-provider-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-oidc-discovery-provider-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-server-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-server-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tekton-chains","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tekton-chains-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-chains-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tkn","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tkn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.42.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tkn-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tkn-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.42.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"trivy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trivy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.67.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"trivy-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trivy-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.67.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"vexctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vexctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"wolfictl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wolfictl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.21-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"zarf","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zarf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.65.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"zot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"aactl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r37"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"apko","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apko"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.20-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"cosign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"cosign-fips","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cosign-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"falcoctl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/falcoctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"flux-source-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flux-source-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"flux-source-controller-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flux-source-controller-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gh","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.83.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gh-doc","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gh-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.83.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gitsign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitsign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gitsign-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitsign-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gitsign-credential-cache","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitsign-credential-cache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kubescape","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubescape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.18-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-1.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-background-controller-1.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-background-controller-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-cleanup-controller-1.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-cleanup-controller-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-cli-1.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-cli-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-init-container-1.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-init-container-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-reports-controller-1.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-reports-controller-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"melange","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/melange"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.32.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"neuvector-sigstore-interface","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/neuvector-sigstore-interface"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0_git20250629-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/policy-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-tester","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/policy-controller-tester"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-webhook","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/policy-controller-webhook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-backfill-index","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor-backfill-index"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-backfill-redis","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor-backfill-redis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-cli","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-cloudsqlproxy","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-cloudsqlproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-createctconfig","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-ctlog-createctconfig"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-managectroots","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-ctlog-managectroots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-verifyfulcio","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-ctlog-verifyfulcio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fulcio-createcerts","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-fulcio-createcerts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-getoidctoken","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-getoidctoken"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-rekor-createsecret","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-rekor-createsecret"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-trillian-createdb","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-trillian-createdb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-trillian-createtree","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-trillian-createtree"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-trillian-updatetree","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-trillian-updatetree"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-tsa-createcertchain","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-tsa-createcertchain"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-tuf-createsecret","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-tuf-createsecret"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-tuf-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-tuf-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spire-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-oidc-discovery-provider","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spire-oidc-discovery-provider"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spire-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tekton-chains","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tkn","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tkn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.42.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"trivy","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trivy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.67.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"vexctl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vexctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"wolfictl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/wolfictl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.21-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"zarf","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zarf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.65.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"zot","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}}]}