Skip to content
OpenAdvisories

Package · Go

github.com/ratify-project/ratify

1 known vulnerabilities.

1 result · Feed

  • High 7.2

    Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries

    Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be confi…