Package
security-profiles-operator-fips
Component
github.com/chrismellard/docker-credential-acr-env
Latest update
Aliases
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
github.com/chrismellard/docker-credential-acr-env is unmaintained and its master HEAD is the commit already vendored, so no fixed release can exist. It arrives as a direct dependency of github.com/sigstore/cosign, which still requires it on the v3 line, so remediation needs cosign to move off it. The community fork osscontainertools/docker-credential-acr carries the fix but renamed its module path, so a replace directive cannot substitute it.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/security-profiles-operator.
Status