ghcr.io/kube-vip/kube-vip:v1.2.1
3 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/kube-vip/kube-vip:v1.2.1
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/kube-vip/kube-vip:v1.2.1
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/kube-vip/kube-vip:v1.2.1 \ --owner verity-org
Before patching
Found 4 vulnerabilities in the original image. 3 fixed by Copa. 1 remaining after patching.
1 HIGH2 MEDIUM1 UNKNOWN
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.53.0
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| GO-2026-5932 | golang.org/x/crypto | v0.53.0 | UNKNOWN |
Original image reference
ghcr.io/kube-vip/kube-vip:v1.2.1