The safeguards map / 1.1 Code and dependencies
Artifact Hub (packages security report)
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
Artifact Hub's scanner uses Trivy to produce a vulnerability report for the container images used by each version of a published package.
Where it sits
1.1 Code and dependencies (primary): Scans the container images that published packages use for known vulnerabilities with Trivy and shows a security report for each package version on its detail page.
Artifact Hub scans containers' images used by packages for security vulnerabilities.
captured
The scanner uses Trivy to generate security reports for each of the package's versions.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who distribute it
- Runs
- at runtime
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Collector's note
The entry covers the packages security report only, not Artifact Hub as a package catalog.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.