Description
ciguard is a static security auditor for CI/CD pipelines. From 0.1.0 to 0.8.1, the published ghcr.io/jo-jo98/ciguard container image inherits the default root user because the Dockerfile lacks a USER directive. This vulnerability is fixed in 0.8.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jo-Jo98 | ciguard | >= 0.1.0, < 0.8.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ciguard | >= 0.1.0, < 0.8.2 | 0.8.2 | GHSA-jrm4-4pcf-4763 |