Package
policy-controller
Component
github.com/chrismellard/docker-credential-acr-env
Latest update
Aliases
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
This package is affected by GO-2026-6225 through its transitive github.com/chrismellard/docker-credential-acr-env dependency, which has no fixed version. The dependency is unmaintained upstream, and the request to address it has gone unanswered. It is imported by github.com/sigstore/cosign/v3/cmd/cosign/cli/options, which still requires it in the latest release, so it cannot be dropped downstream without an upstream fork or fix from cosign.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/policy-controller.
Status