Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding detection events for tekton-chains #3122

Merged
merged 1 commit into from Mar 21, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
43 changes: 31 additions & 12 deletions tekton-chains.advisories.yaml
Expand Up @@ -79,21 +79,26 @@ advisories:
data:
fixed-version: 0.19.0-r6

- id: GHSA-2c7c-3mj9-8fqh
events:
- timestamp: 2023-12-14T09:33:13Z
type: fixed
data:
fixed-version: 0.19.0-r3

- id: GHSA-9763-4f94-gfch
- id: CVE-2024-24786
aliases:
- GHSA-8r3f-844c-mc37
events:
- timestamp: 2024-01-24T07:48:56Z
type: fixed
- timestamp: 2024-03-20T22:06:53Z
type: detection
data:
fixed-version: 0.19.0-r6
type: scan/v1
data:
subpackageName: tekton-chains
componentID: 775e84de213e32a7
componentName: google.golang.org/protobuf
componentVersion: v1.32.0
componentType: go-module
componentLocation: /usr/bin/tekton-chains
scanner: grype

- id: GHSA-c5q2-7r4c-mv6g
- id: CVE-2024-28180
aliases:
- GHSA-c5q2-7r4c-mv6g
events:
- timestamp: 2024-03-08T07:18:57Z
type: detection
Expand All @@ -112,6 +117,20 @@ advisories:
data:
fixed-version: 0.20.0-r3

- id: GHSA-2c7c-3mj9-8fqh
events:
- timestamp: 2023-12-14T09:33:13Z
type: fixed
data:
fixed-version: 0.19.0-r3

- id: GHSA-9763-4f94-gfch
events:
- timestamp: 2024-01-24T07:48:56Z
type: fixed
data:
fixed-version: 0.19.0-r6

- id: GHSA-jq35-85cj-fj4p
events:
- timestamp: 2023-12-14T09:33:02Z
Expand Down