Skip to main content

registry.k8s.io/csi-secrets-store/driver:v1.6.0

Base OS: debian 12.1390 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/kubernetes-sigs/secrets-store-csi-driver:v1.6.0
SignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \
  --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  ghcr.io/verity-org/kubernetes-sigs/secrets-store-csi-driver:v1.6.0
Build provenance
gh attestation verify \
  oci://ghcr.io/verity-org/kubernetes-sigs/secrets-store-csi-driver:v1.6.0 \
  --owner verity-org

Before patching

Found 245 vulnerabilities in the original image. 90 fixed by Copa. 155 remaining after patching.

5 CRITICAL41 HIGH95 MEDIUM90 LOW14 UNKNOWN

Awaiting upstream fix

No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.

Original image reference
registry.k8s.io/csi-secrets-store/driver:v1.6.0