OpenShift Pipelines/redhat-user-workloads/pipelines-chains-controller-rhel9
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Cosign's verify-blob-attestation reports false positive when payload parsing fails | github.com/sigstore/cosign/v2github.com/sigstore/cosign/v3 | GoRed Hat | Medium | Fix reported |