Ecosyste.ms: Repos
An open API service providing repository metadata for many open source software ecosystems.
GitHub / mchmarny / vimp
Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.
JSON API: https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mchmarny%2Fvimp
Stars: 54
Forks: 4
Open Issues: 15
License: apache-2.0
Language: Go
Repo Size: 46.9 MB
Dependencies:
380
Created: over 1 year ago
Updated: 3 months ago
Last pushed: 8 months ago
Last synced: 5 days ago
Topics: artifact, container, cve, gcp, grype, registry, snyk, trivy, vulnerability
Files
Loading...
Readme
Loading...
Dependencies
.github/workflows/build.yaml
actions
- actions/cache 88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 composite
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
- actions/setup-go fac708d6674e30b6ba41289acaab6d4b75aa0753 composite
- google-github-actions/auth 35b0e87d162680511bf346c299f71c9c5c379033 composite
- ko-build/setup-ko ace48d793556083a76f1e3e6068850c1f4a369aa composite
.github/workflows/on-cron.yaml
actions
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
.github/workflows/on-push.yaml
actions
- actions/cache 88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 composite
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
- actions/setup-go fac708d6674e30b6ba41289acaab6d4b75aa0753 composite
- anchore/sbom-action/download-syft 4d571ad1038a9cc29d676154ef265ab8f9027042 composite
- goreleaser/goreleaser-action f82d6c1c344bcacabba2c841718984797f664a6b composite
- slsa-framework/slsa-verifier/actions/installer c9abffe4d2ab2ffa0b2ea9b2582b84164f390adc composite
.github/workflows/process.yaml
actions
- anchore/scan-action/download-grype 4be3c24559b430723e51858969965e163b196957 composite
- aquasecurity/trivy-action 41f05d9ecffa2ed3f1580af306000f734b733e54 composite
- snyk/actions/docker b98d498629f1c368650224d6d212bf7dfa89e4bf composite
.github/workflows/score.yaml
actions
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
- actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
- github/codeql-action/upload-sarif 6c089f53dd51dc3fc7e599c3cb5356453a52ca9e composite
- ossf/scorecard-action 80e868c13c90f172d68d1f4501dee99e2479f7af composite
.github/workflows/sign.yaml
actions
- google-github-actions/auth 35b0e87d162680511bf346c299f71c9c5c379033 composite
- sigstore/cosign-installer dd6b2e2b610a11fd73dd187a43d57cc1394e35f9 composite
.github/workflows/slsa.yaml
actions
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
- google-github-actions/auth 35b0e87d162680511bf346c299f71c9c5c379033 composite
- slsa-framework/slsa-verifier/actions/installer c9abffe4d2ab2ffa0b2ea9b2582b84164f390adc composite
.github/workflows/test.yaml
actions
- actions/cache 88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 composite
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
- actions/setup-go fac708d6674e30b6ba41289acaab6d4b75aa0753 composite
- anchore/scan-action/download-grype 4be3c24559b430723e51858969965e163b196957 composite
- andstor/file-existence-action 20b4d2e596410855db8f9ca21e96fbe18e12930b composite
- aquasecurity/trivy-action 41f05d9ecffa2ed3f1580af306000f734b733e54 composite
- codecov/codecov-action eaaf4bedf32dbdc6b720b63067d99c4d77d6047d composite
- github/codeql-action/upload-sarif 6c089f53dd51dc3fc7e599c3cb5356453a52ca9e composite
- golangci/golangci-lint-action 639cd343e1d3b897ff35927a75193d57cfcba299 composite
- karancode/yamllint-github-action fdef6bc189425ecc84cc4543b2674566c0827053 composite
- postgres * docker
go.mod
go
- cloud.google.com/go v0.110.6
- cloud.google.com/go/bigquery v1.53.0
- cloud.google.com/go/compute v1.23.0
- cloud.google.com/go/compute/metadata v0.2.3
- cloud.google.com/go/iam v1.1.1
- github.com/Jeffail/gabs/v2 v2.7.0
- github.com/andybalholm/brotli v1.0.5
- github.com/apache/arrow/go/v12 v12.0.1
- github.com/apache/thrift v0.18.1
- github.com/containerd/stargz-snapshotter/estargz v0.14.3
- github.com/cpuguy83/go-md2man/v2 v2.0.2
- github.com/davecgh/go-spew v1.1.1
- github.com/docker/cli v24.0.5+incompatible
- github.com/docker/distribution v2.8.2+incompatible
- github.com/docker/docker v24.0.5+incompatible
- github.com/docker/docker-credential-helpers v0.8.0
- github.com/dustin/go-humanize v1.0.1
- github.com/goccy/go-json v0.10.2
- github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
- github.com/golang/protobuf v1.5.3
- github.com/golang/snappy v0.0.4
- github.com/google/flatbuffers v23.5.26+incompatible
- github.com/google/go-cmp v0.5.9
- github.com/google/go-containerregistry v0.15.2
- github.com/google/s2a-go v0.1.4
- github.com/google/uuid v1.3.0
- github.com/googleapis/enterprise-certificate-proxy v0.2.5
- github.com/googleapis/gax-go/v2 v2.12.0
- github.com/jackc/pgpassfile v1.0.0
- github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a
- github.com/jackc/pgx/v5 v5.4.2
- github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
- github.com/klauspost/asmfmt v1.3.2
- github.com/klauspost/compress v1.16.7
- github.com/klauspost/cpuid/v2 v2.2.5
- github.com/kr/text v0.2.0
- github.com/mattn/go-colorable v0.1.13
- github.com/mattn/go-isatty v0.0.19
- github.com/minio/asm2plan9s v0.0.0-20200509001527-cdd76441f9d8
- github.com/minio/c2goasm v0.0.0-20190812172519-36a3d3bbc4f3
- github.com/mitchellh/go-homedir v1.1.0
- github.com/opencontainers/go-digest v1.0.0
- github.com/opencontainers/image-spec v1.1.0-rc4
- github.com/pierrec/lz4/v4 v4.1.18
- github.com/pkg/errors v0.9.1
- github.com/pmezard/go-difflib v1.0.0
- github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
- github.com/rs/zerolog v1.29.1
- github.com/russross/blackfriday/v2 v2.1.0
- github.com/sirupsen/logrus v1.9.3
- github.com/stretchr/testify v1.8.2
- github.com/urfave/cli/v2 v2.25.7
- github.com/vbatts/tar-split v0.11.5
- github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673
- github.com/zeebo/xxh3 v1.0.2
- go.opencensus.io v0.24.0
- golang.org/x/crypto v0.11.0
- golang.org/x/mod v0.12.0
- golang.org/x/net v0.12.0
- golang.org/x/oauth2 v0.10.0
- golang.org/x/sync v0.3.0
- golang.org/x/sys v0.10.0
- golang.org/x/text v0.11.0
- golang.org/x/tools v0.11.0
- golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2
- google.golang.org/api v0.134.0
- google.golang.org/appengine v1.6.7
- google.golang.org/genproto v0.0.0-20230726155614-23370e0ffb3e
- google.golang.org/genproto/googleapis/api v0.0.0-20230726155614-23370e0ffb3e
- google.golang.org/genproto/googleapis/rpc v0.0.0-20230726155614-23370e0ffb3e
- google.golang.org/grpc v1.57.0
- google.golang.org/protobuf v1.31.0
- gopkg.in/yaml.v3 v3.0.1
- lukechampine.com/uint128 v1.3.0
- modernc.org/cc/v3 v3.41.0
- modernc.org/ccgo/v3 v3.16.14
- modernc.org/libc v1.24.1
- modernc.org/mathutil v1.6.0
- modernc.org/memory v1.6.0
- modernc.org/opt v0.1.3
- modernc.org/sqlite v1.24.0
- modernc.org/strutil v1.1.3
- modernc.org/token v1.1.0