argo-cdKubernetes, CI & IaC
Argo CD GitOps controller for Kubernetes with its web UI, built from source via melange.
Size 211 MBArch x86_64, aarch64User argocd (65532)Updated 14 days agoUpstream argo-cd.readthedocs.io
Pull this image
docker pull ghcr.io/rtvkiz/minimal-argo-cd:latestdocker pull ghcr.io/rtvkiz/minimal-argo-cd:latest-devThe -dev variant adds a shell, package manager and build toolchain. For CI and debugging — not production.
Details
- Repository
- ghcr.io/rtvkiz/minimal-argo-cd
- Size (compressed)
- 211 MB
- Built
- 2026-10-19T04:42:32Z (14 days ago)
- Architectures
- x86_64, aarch64
- Primary package
- argo-cd
- Entrypoint
- /usr/bin/argocd
- User
- argocd (65532)
- Working dir
- /home/argocd
- Architectures
- x86_64, aarch64
- Environment
- Labels
org.opencontainers.image.title minimal-argo-cd org.opencontainers.image.description Hardened shell-less Argo CD built from source via melange with CVE patches on every rebuild org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/argo-cd org.opencontainers.image.licenses Apache-2.0
- Entrypoint
- /usr/bin/argocd
- User
- argocd (65532)
- Working dir
- /home/argocd
- Architectures
- x86_64, aarch64
- Environment
- Labels
org.opencontainers.image.title minimal-argo-cd-dev org.opencontainers.image.description Dev variant of minimal-argo-cd: same argocd binary + shell + debugging tools. Not for production. org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/argo-cd org.opencontainers.image.licenses Apache-2.0 dev.minimal.variant dev
| Tag | Pull | Published |
|---|---|---|
| 3 | ghcr.io/rtvkiz/minimal-argo-cd:3 | 2026-11-02 |
| 3.5 | ghcr.io/rtvkiz/minimal-argo-cd:3.5 | 2026-11-02 |
| 3.5.6-r0 | ghcr.io/rtvkiz/minimal-argo-cd:3.5.6-r0 | 2026-11-02 |
| 3.5.6-r0-20261102 | ghcr.io/rtvkiz/minimal-argo-cd:3.5.6-r0-20261102 | 2026-11-02 |
| latest | ghcr.io/rtvkiz/minimal-argo-cd:latest | 2026-11-02 |
| 3-dev | ghcr.io/rtvkiz/minimal-argo-cd:3-dev | 2026-11-02 |
| 3.5-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.5-dev | 2026-11-02 |
| 3.5.6-r0-20261102-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.5.6-r0-20261102-dev | 2026-11-02 |
| 3.5.6-r0-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.5.6-r0-dev | 2026-11-02 |
| latest-dev | ghcr.io/rtvkiz/minimal-argo-cd:latest-dev | 2026-11-02 |
| 3.5.6-r0-20261031 | ghcr.io/rtvkiz/minimal-argo-cd:3.5.6-r0-20261031 | 2026-10-31 |
| 3.5.6-r0-20261031-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.5.6-r0-20261031-dev | 2026-10-31 |
| 3.4 | ghcr.io/rtvkiz/minimal-argo-cd:3.4 | 2026-10-31 |
| 3.4.3-r1 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1 | 2026-10-31 |
| 3.4.3-r1-20261031 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261031 | 2026-10-31 |
| 3.4-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4-dev | 2026-10-31 |
| 3.4.3-r1-20261031-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261031-dev | 2026-10-31 |
| 3.4.3-r1-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-dev | 2026-10-31 |
| 3.4.3-r1-20261030 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261030 | 2026-10-30 |
| 3.4.3-r1-20261030-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261030-dev | 2026-10-30 |
| 3.4.3-r1-20261029 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261029 | 2026-10-29 |
| 3.4.3-r1-20261029-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261029-dev | 2026-10-29 |
| 3.4.3-r1-20261028 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261028 | 2026-10-28 |
| 3.4.3-r1-20261028-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261028-dev | 2026-10-28 |
| 3.4.3-r1-20261027 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261027 | 2026-10-27 |
| 3.4.3-r1-20261027-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261027-dev | 2026-10-27 |
| 3.4.3-r1-20261026 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261026 | 2026-10-26 |
| 3.4.3-r1-20261026-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261026-dev | 2026-10-26 |
| 3.4.3-r1-20261025 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261025 | 2026-10-25 |
| 3.4.3-r1-20261025-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261025-dev | 2026-10-25 |
| 3.4.3-r1-20261024 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261024 | 2026-10-24 |
| 3.4.3-r1-20261024-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261024-dev | 2026-10-24 |
| 3.4.3-r1-20261023 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261023 | 2026-10-23 |
| 3.4.3-r1-20261023-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261023-dev | 2026-10-23 |
| 3.4.3-r1-20261022 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261022 | 2026-10-22 |
| 3.4.3-r1-20261022-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261022-dev | 2026-10-22 |
| 3.4.3-r1-20261021 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261021 | 2026-10-21 |
| 3.4.3-r1-20261021-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261021-dev | 2026-10-21 |
| 3.4.3-r1-20261020 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261020 | 2026-10-20 |
| 3.4.3-r1-20261020-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261020-dev | 2026-10-20 |
| 3.4.3-r1-20261019 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261019 | 2026-10-19 |
| 3.4.3-r1-20261019-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261019-dev | 2026-10-19 |
| 3.4.3-r1-20261018 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261018 | 2026-10-18 |
| 3.4.3-r1-20261018-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261018-dev | 2026-10-18 |
| 3.4.3-r1-20261016 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261016 | 2026-10-16 |
| 3.4.3-r1-20261017 | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261017 | 2026-10-16 |
| 3.4.3-r1-20261016-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261016-dev | 2026-10-16 |
| 3.4.3-r1-20261017-dev | ghcr.io/rtvkiz/minimal-argo-cd:3.4.3-r1-20261017-dev | 2026-10-16 |
298 packages in the image, resolved from the SPDX SBOM.
| Package | Version | License |
|---|---|---|
| alpine/ca-certificates | 20260909 | MPL-2.0 AND MIT |
| argo-cd | v3.4.3 | Apache-2.0 |
| argo-cd-3.4 | 3.4.3-r1 | Apache-2.0 |
| argo-cd-3.4 | 3.4.3-r1 | Apache-2.0 |
| argo-cd-3.4 | 3.4.3-r1 | — |
| argo-cd-3.4.yaml | beeb63e695318e4c2e521c7ace084a7ab02938c5 | Apache-2.0 |
| ca-certificates-bundle | 20260909-r2 | MPL-2.0 AND MIT |
| ca-certificates-bundle | 20260909-r2 | (MPL-2.0 AND MIT) |
| ca-certificates-bundle | 20260909-r2 | — |
| ca-certificates.yaml | f47c125470a19db0f450c2e4928a0db14f933d91 | Apache-2.0 |
| cloud.google.com/go/auth | v0.15.0 | — |
| cloud.google.com/go/auth/oauth2adapt | v0.2.7 | — |
| cloud.google.com/go/compute/metadata | v0.9.0 | — |
| code.gitea.io/sdk/gitea | v0.23.2 | — |
| dario.cat/mergo | v1.0.2 | — |
| github.com/42wim/httpsig | v1.2.3 | — |
| github.com/alicebob/miniredis/v2 | v2.37.0 | — |
| github.com/argoproj/argo-cd/gitops-engine | UNKNOWN | — |
| github.com/argoproj/argo-cd/v3 | v3.4.3+dirty | — |
| github.com/argoproj/notifications-engine | v0.5.1-0.20260213231747-1dbe3de712f8 | — |
| github.com/argoproj/pkg | v0.13.6 | — |
| github.com/argoproj/pkg/v2 | v2.0.1 | — |
| github.com/aws/aws-sdk-go-v2 | v1.41.4 | — |
| github.com/aws/aws-sdk-go-v2/config | v1.32.11 | — |
| github.com/aws/aws-sdk-go-v2/credentials | v1.19.11 | — |
| github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.18.19 | — |
| github.com/aws/aws-sdk-go-v2/internal/configsources | v1.4.20 | — |
| github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.7.20 | — |
| github.com/aws/aws-sdk-go-v2/internal/ini | v1.8.5 | — |
| github.com/aws/aws-sdk-go-v2/service/codecommit | v1.33.11 | — |
| github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding | v1.13.6 | — |
| github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.13.19 | — |
| github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi | v1.31.8 | — |
| github.com/aws/aws-sdk-go-v2/service/signin | v1.0.7 | — |
| github.com/aws/aws-sdk-go-v2/service/sqs | v1.38.1 | — |
| github.com/aws/aws-sdk-go-v2/service/sso | v1.30.12 | — |
| github.com/aws/aws-sdk-go-v2/service/ssooidc | v1.35.16 | — |
| github.com/aws/aws-sdk-go-v2/service/sts | v1.41.8 | — |
| github.com/aws/smithy-go | v1.24.2 | — |
| github.com/Azure/azure-sdk-for-go/sdk/azcore | v1.21.0 | — |
| github.com/Azure/azure-sdk-for-go/sdk/azidentity | v1.13.1 | — |
| github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache | v0.3.2 | — |
| github.com/Azure/azure-sdk-for-go/sdk/internal | v1.11.2 | — |
| github.com/Azure/go-autorest/autorest | v0.11.29 | — |
| github.com/Azure/go-autorest/autorest/adal | v0.9.23 | — |
| github.com/Azure/go-autorest/autorest/date | v0.3.0 | — |
| github.com/Azure/go-autorest/logger | v0.2.1 | — |
| github.com/Azure/go-autorest/tracing | v0.6.0 | — |
| github.com/Azure/kubelogin | v0.2.16 | — |
| github.com/AzureAD/microsoft-authentication-extensions-for-go/cache | v0.1.1 | — |
| github.com/AzureAD/microsoft-authentication-library-for-go | v1.6.0 | — |
| github.com/beorn7/perks | v1.0.1 | — |
| github.com/blang/semver/v4 | v4.0.0 | — |
| github.com/bmatcuk/doublestar/v4 | v4.10.0 | — |
| github.com/bombsimon/logrusr/v4 | v4.1.0 | — |
| github.com/bradleyfalzon/ghinstallation/v2 | v2.18.0 | — |
| github.com/casbin/casbin/v2 | v2.135.0 | — |
| github.com/casbin/govaluate | v1.10.0 | — |
| github.com/cenkalti/backoff/v4 | v4.3.0 | — |
| github.com/cenkalti/backoff/v5 | v5.0.3 | — |
| github.com/cespare/xxhash/v2 | v2.3.0 | — |
| github.com/chai2010/gettext-go | v1.0.3 | — |
| github.com/chainguard-dev/git-urls | v1.0.2 | — |
| github.com/cloudflare/circl | v1.6.3 | — |
| github.com/coreos/go-oidc/v3 | v3.17.0 | — |
| github.com/cyphar/filepath-securejoin | v0.6.1 | — |
| github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | — |
| github.com/desertbit/timer | v1.0.1 | — |
| github.com/dgryski/go-rendezvous | v0.0.0-20200823014737-9f7001d12a5f | — |
| github.com/distribution/reference | v0.6.0 | — |
| github.com/dlclark/regexp2 | v1.11.5 | — |
| github.com/dustin/go-humanize | v1.0.1 | — |
| github.com/emicklei/go-restful/v3 | v3.12.2 | — |
| github.com/emirpasic/gods | v1.18.1 | — |
| github.com/evanphx/json-patch | v5.9.11+incompatible | — |
| github.com/evanphx/json-patch/v5 | v5.9.11 | — |
| github.com/exponent-io/jsonpath | v0.0.0-20210407135951-1de76d718b3f | — |
| github.com/expr-lang/expr | v1.17.8 | — |
| github.com/fatih/camelcase | v1.0.0 | — |
| github.com/felixge/httpsnoop | v1.0.4 | — |
| github.com/fsnotify/fsnotify | v1.9.0 | — |
| github.com/fxamacker/cbor/v2 | v2.9.0 | — |
| github.com/gfleury/go-bitbucket-v1 | v0.0.0-20240917142304-df385efaac68 | — |
| github.com/go-errors/errors | v1.5.1 | — |
| github.com/go-fed/httpsig | v1.1.0 | — |
| github.com/go-git/gcfg | v1.5.1-0.20230307220236-3a3c6141e376 | — |
| github.com/go-git/go-billy/v5 | v5.9.0 | — |
| github.com/go-git/go-git/v5 | v5.19.1 | — |
| github.com/go-jose/go-jose/v4 | v4.1.4 | — |
| github.com/go-logr/logr | v1.4.3 | — |
| github.com/go-logr/stdr | v1.2.2 | — |
| github.com/go-openapi/analysis | v0.24.3 | — |
| github.com/go-openapi/errors | v0.22.7 | — |
| github.com/go-openapi/jsonpointer | v0.22.5 | — |
| github.com/go-openapi/jsonreference | v0.21.5 | — |
| github.com/go-openapi/loads | v0.23.3 | — |
| github.com/go-openapi/runtime | v0.29.3 | — |
| github.com/go-openapi/spec | v0.22.4 | — |
| github.com/go-openapi/strfmt | v0.26.0 | — |
| github.com/go-openapi/swag | v0.23.1 | — |
| github.com/go-openapi/swag/conv | v0.25.5 | — |
| github.com/go-openapi/swag/fileutils | v0.25.5 | — |
| github.com/go-openapi/swag/jsonname | v0.25.5 | — |
| github.com/go-openapi/swag/jsonutils | v0.25.5 | — |
| github.com/go-openapi/swag/loading | v0.25.5 | — |
| github.com/go-openapi/swag/mangling | v0.25.5 | — |
| github.com/go-openapi/swag/stringutils | v0.25.5 | — |
| github.com/go-openapi/swag/typeutils | v0.25.5 | — |
| github.com/go-openapi/swag/yamlutils | v0.25.5 | — |
| github.com/go-openapi/validate | v0.25.2 | — |
| github.com/go-playground/webhooks/v6 | v6.4.0 | — |
| github.com/go-redis/cache/v9 | v9.0.0 | — |
| github.com/go-viper/mapstructure/v2 | v2.5.0 | — |
| github.com/gobwas/glob | v0.2.3 | — |
| github.com/gogits/go-gogs-client | v0.0.0-20210131175652-1d7215cd8d85 | — |
| github.com/gogo/protobuf | v1.3.2 | — |
| github.com/golang-jwt/jwt/v4 | v4.5.2 | — |
| github.com/golang-jwt/jwt/v5 | v5.3.1 | — |
| github.com/golang/groupcache | v0.0.0-20241129210726-2c02b8208cf8 | — |
| github.com/golang/protobuf | v1.5.4 | — |
| github.com/google/btree | v1.1.3 | — |
| github.com/google/gnostic-models | v0.7.0 | — |
| github.com/google/go-cmp | v0.7.0 | — |
| github.com/google/go-github/v69 | v69.2.0 | — |
| github.com/google/go-github/v84 | v84.0.0 | — |
| github.com/google/go-jsonnet | v0.21.0 | — |
| github.com/google/go-querystring | v1.2.0 | — |
| github.com/google/s2a-go | v0.1.9 | — |
| github.com/google/shlex | v0.0.0-20191202100458-e7afc7fbc510 | — |
| github.com/google/uuid | v1.6.1-0.20241114170450-2d3c2a9cc518 | — |
| github.com/googleapis/enterprise-certificate-proxy | v0.3.4 | — |
| github.com/googleapis/gax-go/v2 | v2.14.1 | — |
| github.com/gorilla/handlers | v1.5.2 | — |
| github.com/gorilla/websocket | v1.5.4-0.20250319132907-e064f32e3674 | — |
| github.com/gosimple/slug | v1.15.0 | — |
| github.com/gosimple/unidecode | v1.0.1 | — |
| github.com/gregdel/pushover | v1.3.1 | — |
| github.com/gregjones/httpcache | v0.0.0-20190611155906-901d90724c79 | — |
| github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus | v1.1.0 | — |
| github.com/grpc-ecosystem/go-grpc-middleware/v2 | v2.3.3 | — |
| github.com/grpc-ecosystem/grpc-gateway | v1.16.0 | — |
| github.com/grpc-ecosystem/grpc-gateway/v2 | v2.28.0 | — |
| github.com/hashicorp/go-cleanhttp | v0.5.2 | — |
| github.com/hashicorp/go-retryablehttp | v0.7.8 | — |
| github.com/hashicorp/go-version | v1.7.0 | — |
| github.com/huandu/xstrings | v1.5.0 | — |
| github.com/improbable-eng/grpc-web | v0.15.1-0.20230209220825-1d9bbb09a099 | — |
| github.com/itchyny/gojq | v0.12.18 | — |
| github.com/itchyny/timefmt-go | v0.1.7 | — |
| github.com/jbenet/go-context | v0.0.0-20150711004518-d14ea06fba99 | — |
| github.com/jeremywohl/flatten | v1.0.2-0.20211013061545-07e4a09fb8e4 | — |
| github.com/jonboulle/clockwork | v0.5.0 | — |
| github.com/josharian/intern | v1.0.0 | — |
| github.com/json-iterator/go | v1.1.12 | — |
| github.com/kballard/go-shellquote | v0.0.0-20180428030007-95032a82bc51 | — |
| github.com/kevinburke/ssh_config | v1.2.0 | — |
| github.com/klauspost/compress | v1.18.0 | — |
| github.com/klauspost/cpuid/v2 | v2.3.0 | — |
| github.com/ktrysmt/go-bitbucket | v0.9.94 | — |
| github.com/kylelemons/godebug | v1.1.0 | — |
| github.com/liggitt/tabwriter | v0.0.0-20181228230101-89fcab3d43de | — |
| github.com/mailru/easyjson | v0.9.0 | — |
| github.com/MakeNowJust/heredoc | v1.0.0 | — |
| github.com/Masterminds/goutils | v1.1.1 | — |
| github.com/Masterminds/semver/v3 | v3.4.0 | — |
| github.com/Masterminds/sprig/v3 | v3.3.0 | — |
| github.com/mattn/go-isatty | v0.0.20 | — |
| github.com/mattn/go-zglob | v0.0.6 | — |
| github.com/microsoft/azure-devops-go-api/azuredevops/v7 | v7.1.1-0.20241014080628-3045bdf43455 | — |
| github.com/minio/blake2b-simd | v0.0.0-20160723061019-3f5f724cb5b1 | — |
| github.com/mitchellh/copystructure | v1.2.0 | — |
| github.com/mitchellh/go-wordwrap | v1.0.1 | — |
| github.com/mitchellh/mapstructure | v1.5.0 | — |
| github.com/mitchellh/reflectwalk | v1.0.2 | — |
| github.com/moby/spdystream | v0.5.1 | — |
| github.com/moby/term | v0.5.2 | — |
| github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | — |
| github.com/modern-go/reflect2 | v1.0.3-0.20250322232337-35a7c28c31ee | — |
| github.com/monochromegane/go-gitignore | v0.0.0-20200626010858-205db1a8cc00 | — |
| github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | — |
| github.com/mxk/go-flowrate | v0.0.0-20140419014527-cca7078d478f | — |
| github.com/nats-io/nats.go | v1.43.0 | — |
| github.com/nats-io/nkeys | v0.4.11 | — |
| github.com/nats-io/nuid | v1.0.1 | — |
| github.com/oklog/ulid/v2 | v2.1.1 | — |
| github.com/opencontainers/go-digest | v1.0.0 | — |
| github.com/opencontainers/image-spec | v1.1.1 | — |
| github.com/opsgenie/opsgenie-go-sdk-v2 | v1.2.23 | — |
| github.com/OvyFlash/telegram-bot-api | v0.0.0-20241219171906-3f2ca0c14ada | — |
| github.com/PagerDuty/go-pagerduty | v1.8.0 | — |
| github.com/patrickmn/go-cache | v2.1.1-0.20191004192108-46f407853014+incompatible | — |
| github.com/peterbourgon/diskv | v2.0.1+incompatible | — |
| github.com/pjbgf/sha1cd | v0.6.0 | — |
| github.com/pkg/browser | v0.0.0-20240102092130-5ac0b6a4141c | — |
| github.com/pkg/errors | v0.9.1 | — |
| github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | — |
| github.com/prometheus/client_golang | v1.23.2 | — |
| github.com/prometheus/client_model | v0.6.2 | — |
| github.com/prometheus/common | v0.66.1 | — |
| github.com/prometheus/procfs | v0.16.1 | — |
| github.com/ProtonMail/go-crypto | v1.1.6 | — |
| github.com/r3labs/diff/v3 | v3.0.2 | — |
| github.com/redis/go-redis/v9 | v9.18.0 | — |
| github.com/robfig/cron/v3 | v3.0.2-0.20210106135023-bc59245fe10e | — |
| github.com/RocketChat/Rocket.Chat.Go.SDK | v0.0.0-20240116134246-a8cbe886bab0 | — |
| github.com/rs/cors | v1.11.1 | — |
| github.com/russross/blackfriday/v2 | v2.1.0 | — |
| github.com/sergi/go-diff | v1.3.2-0.20230802210424-5b0b94c5c0d3 | — |
| github.com/shopspring/decimal | v1.4.0 | — |
| github.com/sirupsen/logrus | v1.9.4 | — |
| github.com/skeema/knownhosts | v1.3.1 | — |
| github.com/skratchdot/open-golang | v0.0.0-20200116055534-eef842397966 | — |
| github.com/slack-go/slack | v0.23.1 | — |
| github.com/soheilhy/cmux | v0.1.5 | — |
| github.com/spf13/cast | v1.7.1 | — |
| github.com/spf13/cobra | v1.10.2 | — |
| github.com/spf13/pflag | v1.0.10 | — |
| github.com/stretchr/testify | v1.11.1 | — |
| github.com/TomOnTime/utfutil | v1.0.0 | — |
| github.com/valyala/bytebufferpool | v1.0.0 | — |
| github.com/valyala/fasttemplate | v1.2.2 | — |
| github.com/vmihailenco/go-tinylfu | v0.2.2 | — |
| github.com/vmihailenco/msgpack/v5 | v5.4.1 | — |
| github.com/vmihailenco/tagparser/v2 | v2.0.0 | — |
| github.com/x448/float16 | v0.8.4 | — |
| github.com/xanzy/ssh-agent | v0.3.3 | — |
| github.com/xlab/treeprint | v1.2.0 | — |
| github.com/yuin/gopher-lua | v1.1.1 | — |
| gitlab.com/gitlab-org/api/client-go | v1.46.0 | — |
| go.opentelemetry.io/auto/sdk | v1.2.1 | — |
| go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | v0.67.0 | — |
| go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.67.0 | — |
| go.opentelemetry.io/otel | v1.43.0 | — |
| go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.42.0 | — |
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.42.0 | — |
| go.opentelemetry.io/otel/metric | v1.43.0 | — |
| go.opentelemetry.io/otel/sdk | v1.43.0 | — |
| go.opentelemetry.io/otel/trace | v1.43.0 | — |
| go.opentelemetry.io/proto/otlp | v1.9.0 | — |
| go.uber.org/atomic | v1.11.0 | — |
| go.yaml.in/yaml/v2 | v2.4.2 | — |
| go.yaml.in/yaml/v3 | v3.0.4 | — |
| golang.org/x/crypto | v0.52.0 | — |
| golang.org/x/net | v0.55.0 | — |
| golang.org/x/oauth2 | v0.36.0 | — |
| golang.org/x/sync | v0.20.0 | — |
| golang.org/x/sys | v0.45.0 | — |
| golang.org/x/term | v0.43.0 | — |
| golang.org/x/text | v0.37.0 | — |
| golang.org/x/time | v0.15.0 | — |
| gomodules.xyz/envconfig | v1.3.1-0.20190308184047-426f31af0d45 | — |
| gomodules.xyz/jsonpatch/v2 | v2.4.0 | — |
| gomodules.xyz/notify | v0.1.1 | — |
| google.golang.org/api | v0.223.0 | — |
| google.golang.org/genproto | v0.0.0-20240213162025-012b6fc9bca9 | — |
| google.golang.org/genproto/googleapis/api | v0.0.0-20260209200024-4cfbd4190f57 | — |
| google.golang.org/genproto/googleapis/rpc | v0.0.0-20260226221140-a57be14db171 | — |
| google.golang.org/grpc | v1.79.3 | — |
| google.golang.org/protobuf | v1.36.11 | — |
| gopkg.in/evanphx/json-patch.v4 | v4.12.0 | — |
| gopkg.in/gomail.v2 | v2.0.0-20160411212932-81ebce5c23df | — |
| gopkg.in/inf.v0 | v0.9.1 | — |
| gopkg.in/warnings.v0 | v0.1.2 | — |
| gopkg.in/yaml.v2 | v2.4.0 | — |
| gopkg.in/yaml.v3 | v3.0.1 | — |
| k8s.io/api | v0.34.0 | — |
| k8s.io/apiextensions-apiserver | v0.34.0 | — |
| k8s.io/apimachinery | v0.34.0 | — |
| k8s.io/apiserver | v0.34.0 | — |
| k8s.io/cli-runtime | v0.34.0 | — |
| k8s.io/client-go | v0.34.0 | — |
| k8s.io/component-base | v0.34.0 | — |
| k8s.io/component-helpers | v0.34.0 | — |
| k8s.io/controller-manager | v0.34.0 | — |
| k8s.io/klog/v2 | v2.130.1 | — |
| k8s.io/kube-aggregator | v0.34.0 | — |
| k8s.io/kube-openapi | v0.0.0-20250710124328-f3f2b991d03b | — |
| k8s.io/kubectl | v0.34.0 | — |
| k8s.io/kubernetes | v1.34.2 | — |
| k8s.io/utils | v0.0.0-20250604170112-4c0f3b243397 | — |
| layeh.com/gopher-json | v0.0.0-20190114024228-97fed8db8427 | — |
| nhooyr.io/websocket | v1.8.7 | — |
| oras.land/oras-go/v2 | v2.6.0 | — |
| sha256:0a72aeec37f395b0fd11e8d5c42d3065d1a0488dffffac5816269050d0f3c3ee | 20230201 | — |
| sha256:2c8cd36d3c368110b53b3599bd811372621f2a210bba9ff3805d44eb0c5b21dd | sha256:2c8cd36d3c368110b53b3599bd811372621f2a210bba9ff3805d44eb0c5b21dd | — |
| sigs.k8s.io/controller-runtime | v0.21.0 | — |
| sigs.k8s.io/json | v0.0.0-20241014173422-cfa47c3a1cc8 | — |
| sigs.k8s.io/kustomize/api | v0.20.1 | — |
| sigs.k8s.io/kustomize/kyaml | v0.20.1 | — |
| sigs.k8s.io/randfill | v1.0.0 | — |
| sigs.k8s.io/structured-merge-diff/v6 | v6.3.2 | — |
| sigs.k8s.io/yaml | v1.6.0 | — |
| stdlib | go1.26.4 | BSD-3-Clause |
| wolfi | 20230201 | — |
| wolfi-baselayout | 20230201-r30 | MIT |
| wolfi-baselayout | 20230201-r30 | MIT |
| wolfi-baselayout | 20230201-r30 | — |
| wolfi-baselayout.yaml | a4472f6292a5e48d6d611bf24c6e119b1a483e66 | Apache-2.0 |
5 critical75 high23 medium6 low172 fixable
| CVE | Severity | Package | Installed | Fixed in |
|---|---|---|---|---|
| CVE-2026-78663 | Critical | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
| CVE-2026-78663 | Critical | stdlib | go1.26.4 | 1.26.9 |
| GHSA-fmxq-cgp8-87wp | Critical | github.com/argoproj/argo-cd/v3 | v3.4.3+dirty | 3.4.10 |
| GO-2026-6612 | Critical | golang.org/x/net | v0.55.0 | 0.60.0 |
| GO-2026-6612 | Critical | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-33818 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| CVE-2026-33818 | High | stdlib | go1.26.4 | 1.25.13 |
| CVE-2026-39821 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| CVE-2026-39822 | High | stdlib | go1.26.4 | 1.25.12 |
| CVE-2026-46600 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| CVE-2026-46600 | High | stdlib | go1.26.4 | 1.26.6 |
| CVE-2026-50151 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| CVE-2026-50163 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.5-r2 |
| CVE-2026-56852 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.5-r3 |
| CVE-2026-56853 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| CVE-2026-56853 | High | stdlib | go1.26.4 | 1.25.13 |
| CVE-2026-56855 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r2 |
| CVE-2026-56859 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| CVE-2026-56859 | High | stdlib | go1.26.4 | 1.25.13 |
| CVE-2026-56862 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| CVE-2026-56862 | High | stdlib | go1.26.4 | 1.25.13 |
| CVE-2026-56864 | High | stdlib | go1.26.4 | 1.25.13 |
| CVE-2026-56865 | High | stdlib | go1.26.4 | 1.25.13 |
| CVE-2026-56866 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| CVE-2026-56866 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-71556 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r1 |
| CVE-2026-78659 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
| CVE-2026-78659 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-78660 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
| CVE-2026-78660 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-78662 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r2 |
| CVE-2026-78667 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| CVE-2026-78667 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-78669 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
| CVE-2026-78669 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-84304 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r1 |
| CVE-2026-84445 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r3 |
| CVE-2026-94439 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| CVE-2026-94439 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-94440 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| CVE-2026-94440 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-94444 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-94447 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-97031 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| CVE-2026-97031 | High | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-97032 | High | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
| CVE-2026-97032 | High | stdlib | go1.26.4 | 1.26.9 |
| GHSA-2v4p-qf9q-27wj | High | google.golang.org/grpc | v1.79.3 | 1.82.2 |
| GHSA-fxhp-mv3v-67qp | High | oras.land/oras-go/v2 | v2.6.0 | 2.6.2 |
| GHSA-hc8v-wwc9-vgxm | High | github.com/go-git/go-git/v5 | v5.19.1 | 5.19.2 |
| GHSA-hrxh-6v49-42gf | High | google.golang.org/grpc | v1.79.3 | 1.82.1 |
| GHSA-j6cw-g6p4-7hch | High | github.com/argoproj/argo-cd/v3 | v3.4.3+dirty | 3.4.10 |
| GHSA-jxpm-75mh-9fp7 | High | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 |
| GHSA-m37j-52j7-pjw7 | High | oras.land/oras-go/v2 | v2.6.0 | 2.6.2 |
| GHSA-vp52-pcj8-j9qc | High | google.golang.org/grpc | v1.79.3 | 1.83.1 |
| GO-2026-4970 | High | stdlib | go1.26.4 | 1.25.12 |
| GO-2026-5026 | High | stdlib | go1.26.4 | 1.25.13 |
| GO-2026-5942 | High | golang.org/x/net | v0.55.0 | 0.56.0 |
| GO-2026-5942 | High | stdlib | go1.26.4 | 1.26.6 |
| GO-2026-5970 | High | golang.org/x/text | v0.37.0 | 0.39.0 |
| GO-2026-5972 | High | stdlib | go1.26.4 | 1.25.13 |
| GO-2026-6088 | High | stdlib | go1.26.4 | 1.25.13 |
| GO-2026-6089 | High | stdlib | go1.26.4 | 1.25.13 |
| GO-2026-6090 | High | stdlib | go1.26.4 | 1.25.13 |
| GO-2026-6354 | High | golang.org/x/crypto | v0.52.0 | 0.56.0 |
| GO-2026-6355 | High | golang.org/x/crypto | v0.52.0 | 0.56.0 |
| GO-2026-6603 | High | golang.org/x/net | v0.55.0 | 0.60.0 |
| GO-2026-6603 | High | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6605 | High | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6607 | High | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6608 | High | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6609 | High | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6610 | High | golang.org/x/net | v0.55.0 | 0.60.0 |
| GO-2026-6610 | High | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6611 | High | golang.org/x/net | v0.55.0 | 0.60.0 |
| GO-2026-6611 | High | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6613 | High | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6617 | High | golang.org/x/net | v0.55.0 | 0.60.0 |
| GO-2026-6617 | High | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6629 | High | golang.org/x/text | v0.37.0 | 0.41.0 |
| CVE-2026-41178 | Medium | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r1 |
| CVE-2026-42505 | Medium | stdlib | go1.26.4 | 1.25.12 |
| CVE-2026-50162 | Medium | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| CVE-2026-56858 | Medium | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| CVE-2026-56858 | Medium | stdlib | go1.26.4 | 1.25.13 |
| CVE-2026-56860 | Medium | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| CVE-2026-56860 | Medium | stdlib | go1.26.4 | 1.25.13 |
| CVE-2026-71557 | Medium | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r1 |
| CVE-2026-94448 | Medium | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| CVE-2026-94448 | Medium | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-97030 | Medium | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| CVE-2026-97030 | Medium | stdlib | go1.26.4 | 1.26.9 |
| GHSA-8xwf-rjm4-xvhv | Medium | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 |
| GHSA-h7vf-4x9w-h99v | Medium | oras.land/oras-go/v2 | v2.6.0 | 2.6.2 |
| GHSA-qc2q-p7wx-3px3 | Medium | google.golang.org/grpc | v1.79.3 | 1.83.1 |
| GHSA-qgq7-7hm3-q39j | Medium | github.com/go-git/go-git/v5 | v5.19.1 | 5.19.2 |
| GHSA-vh4v-2xq2-g5cg | Medium | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 |
| GO-2026-5158 | Medium | go.opentelemetry.io/otel | v1.43.0 | 1.42.0 |
| GO-2026-5856 | Medium | stdlib | go1.26.4 | 1.25.12 |
| GO-2026-6091 | Medium | stdlib | go1.26.4 | 1.25.13 |
| GO-2026-6218 | Medium | stdlib | go1.26.4 | 1.25.13 |
| GO-2026-6599 | Medium | stdlib | go1.26.4 | 1.26.9 |
| GO-2026-6600 | Medium | stdlib | go1.26.4 | 1.26.9 |
| CVE-2026-48978 | Low | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| CVE-2026-81870 | Low | argo-cd-3.4 | 3.4.3-r1 | 3.4.9-r1 |
| GHSA-8wmf-6v46-5gfg | Low | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.42.0 | 1.45.0 |
| GHSA-8wmf-6v46-5gfg | Low | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.42.0 | 1.45.0 |
| GHSA-8wmf-6v46-5gfg | Low | go.opentelemetry.io/otel/sdk | v1.43.0 | 1.45.0 |
| GHSA-xf85-363p-868w | Low | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 |
| GHSA-22jx-p735-qcpm | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GHSA-25mv-j2qr-v5jq | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GHSA-2gfw-j3c5-j46w | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GHSA-2v4p-qf9q-27wj | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r3 |
| GHSA-5wrp-cwcj-q835 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r1 |
| GHSA-76p8-fhrm-vpc7 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GHSA-7qch-w8m5-g3h3 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GHSA-874m-fcc5-9gqf | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GHSA-8wmf-6v46-5gfg | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.9-r1 |
| GHSA-8xwf-rjm4-xvhv | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| GHSA-c974-w86c-vpfw | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GHSA-f4xw-m386-m277 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GHSA-f5vf-8pvc-394g | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GHSA-fxhp-mv3v-67qp | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.5-r2 |
| GHSA-gg3m-vvp2-p2c5 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GHSA-hc8v-wwc9-vgxm | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r1 |
| GHSA-hq7w-2xrq-wp2j | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GHSA-hrxh-6v49-42gf | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.5-r1 |
| GHSA-jpjm-c3r5-q96r | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.5-r3 |
| GHSA-jxpm-75mh-9fp7 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| GHSA-qgq7-7hm3-q39j | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r1 |
| GHSA-vh4v-2xq2-g5cg | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| GHSA-vp52-pcj8-j9qc | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r1 |
| GHSA-w2q5-6q6x-x959 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GHSA-wpfx-qch4-q5j2 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GHSA-xc2p-8ggw-6cr5 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GHSA-xf85-363p-868w | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| GHSA-xphw-4f88-5f39 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GO-2026-5026 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GO-2026-5158 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r1 |
| GO-2026-5879 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| GO-2026-5880 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.5-r2 |
| GO-2026-5882 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| GO-2026-5884 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| GO-2026-5885 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.4-r2 |
| GO-2026-5932 | Unknown | golang.org/x/crypto | v0.52.0 | — |
| GO-2026-5942 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GO-2026-5970 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.5-r3 |
| GO-2026-5972 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GO-2026-6061 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.5-r1 |
| GO-2026-6088 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GO-2026-6089 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GO-2026-6090 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GO-2026-6091 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GO-2026-6213 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r1 |
| GO-2026-6214 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r1 |
| GO-2026-6218 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.7-r2 |
| GO-2026-6348 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r1 |
| GO-2026-6354 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r2 |
| GO-2026-6355 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r2 |
| GO-2026-6443 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.8-r3 |
| GO-2026-6505 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.9-r1 |
| GO-2026-6599 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GO-2026-6600 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GO-2026-6603 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
| GO-2026-6605 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GO-2026-6607 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GO-2026-6608 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GO-2026-6609 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GO-2026-6610 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
| GO-2026-6611 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
| GO-2026-6612 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
| GO-2026-6613 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r1 |
| GO-2026-6617 | Unknown | argo-cd-3.4 | 3.4.3-r1 | 3.4.10-r2 |
Everything is verifiable without an account. Copy and run:
Build provenance (SLSA v1.0, Build L2)
gh attestation verify oci://ghcr.io/rtvkiz/minimal-argo-cd:latest --owner rtvkizCosign signature
cosign verify \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-argo-cd:latestSBOM attestation (SPDX)
cosign verify-attestation --type spdxjson \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-argo-cd:latest \
| jq -r '.payload | @base64d | fromjson | .predicate'Signatures are logged in the public Rekor transparency log.
More Kubernetes, CI & IaC images
Weighing this against another provider? Thecomparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read themigration guide for what actually breaks when you switch.