Step CA 0

hardened latest
Full version: 0 Analyzed: 2026-02-10
Size Reduction -9% 142.8 MB to 155.9 MB (-13.1 MB saved)
Component Reduction 24% 396 to 303 packages (93 removed)
Vulnerability Reduction -479% 14 to 81 vulnerabilities (-67 eliminated)

Image Comparison

Propertyupstreamhardened
Imagedocker.io/smallstep/step-ca:0.29.0ghcr.io/armorred/step-ca:0-hardened
Size142.8 MB155.9 MB
Layers725
Components396303
Vulnerabilities1481
Runtime Userstep999

Vulnerability Analysis

upstream 14 total
2high
3medium
2low
hardened 81 total
4critical
10high
17medium
Upstream vulnerability details (14)
CVE IDSeverityPackageVersionFixed In
ALPINE-CVE-2024-58251lowbusybox1.37.0-r201.36.1-r21
ALPINE-CVE-2025-46394lowbusybox1.37.0-r201.36.1-r21
ALPINE-CVE-2025-62408mediumc-ares1.34.5-r01.34.6-r0
ALPINE-CVE-2025-10148mediumcurl8.14.1-r28.14.1-r2
ALPINE-CVE-2025-10966mediumcurl8.14.1-r28.17.0-r0
ALPINE-CVE-2025-9086highcurl8.14.1-r28.14.1-r2
GO-2022-0635unknowngithub.com/aws/aws-sdk-gov1.55.7unfixed
GO-2022-0646unknowngithub.com/aws/aws-sdk-gov1.55.7unfixed
GO-2026-4316unknowngithub.com/go-chi/chi/v5v5.2.35.2.4
GHSA-69x3-g4r3-p962highgithub.com/slackhq/nebulav1.9.71.10.3
GO-2026-4337unknownstdlib1.25.51.24.13
GO-2026-4340unknownstdlib1.25.51.24.12
GO-2026-4341unknownstdlib1.25.51.24.12
GO-2026-4342unknownstdlib1.25.51.24.12
Hardened vulnerability details (81)
CVE IDSeverityPackageVersionFixed In
GO-2022-0635unknowngithub.com/aws/aws-sdk-gov1.55.7unfixed
GO-2022-0646unknowngithub.com/aws/aws-sdk-gov1.55.7unfixed
GHSA-vrw8-fxc6-2r93mediumgithub.com/go-chi/chi/v5v5.1.05.2.2
GO-2026-4316unknowngithub.com/go-chi/chi/v5v5.2.35.2.4
GO-2025-3485mediumgithub.com/go-jose/go-jose/v3v3.0.33.0.4
GHSA-c6gw-w398-hv78mediumgithub.com/go-jose/go-jose/v3v3.0.34.0.5
GO-2025-3485mediumgithub.com/go-jose/go-jose/v4v4.0.23.0.4
GHSA-c6gw-w398-hv78mediumgithub.com/go-jose/go-jose/v4v4.0.24.0.5
GO-2025-3553highgithub.com/golang-jwt/jwt/v5v5.2.14.5.2
GHSA-mh63-6h87-95cphighgithub.com/golang-jwt/jwt/v5v5.2.15.2.2
GO-2025-3372highgithub.com/golang/glogv1.2.21.2.4
GHSA-6wxm-mpqj-6jpfhighgithub.com/golang/glogv1.2.21.2.4
GO-2025-4068mediumgithub.com/slackhq/nebulav1.9.41.9.7
GHSA-69x3-g4r3-p962highgithub.com/slackhq/nebulav1.9.41.10.3
GHSA-x6fh-7qmf-69xhmediumgithub.com/slackhq/nebulav1.9.41.9.7
GHSA-69x3-g4r3-p962highgithub.com/slackhq/nebulav1.9.71.10.3
GO-2025-4180criticalgithub.com/smallstep/certificatesv0.28.00.29.0
GO-2025-4181mediumgithub.com/smallstep/certificatesv0.28.00.29.0
GHSA-h8cp-697h-8c8pcriticalgithub.com/smallstep/certificatesv0.28.00.29.0
GHSA-j7c9-79x7-8hprmediumgithub.com/smallstep/certificatesv0.28.00.29.0
GO-2024-3321criticalgolang.org/x/cryptov0.28.00.31.0
GO-2025-3487highgolang.org/x/cryptov0.28.00.35.0
GO-2025-4116unknowngolang.org/x/cryptov0.28.00.43.0
GO-2025-4134mediumgolang.org/x/cryptov0.28.00.45.0
GO-2025-4135mediumgolang.org/x/cryptov0.28.00.45.0
GHSA-f6x5-jh6r-wrfvmediumgolang.org/x/cryptov0.28.00.45.0
GHSA-hcg3-q754-cr77highgolang.org/x/cryptov0.28.00.35.0
GHSA-j5w8-q4qc-rx2xmediumgolang.org/x/cryptov0.28.00.45.0
GHSA-v778-237x-gjrccriticalgolang.org/x/cryptov0.28.00.31.0
GO-2024-3333unknowngolang.org/x/netv0.30.00.33.0
GO-2025-3503mediumgolang.org/x/netv0.30.00.36.0
GO-2025-3595mediumgolang.org/x/netv0.30.00.38.0
GO-2026-4440unknowngolang.org/x/netv0.30.00.45.0
GO-2026-4441unknowngolang.org/x/netv0.30.00.45.0
GHSA-qxp5-gwg8-xv66mediumgolang.org/x/netv0.30.00.36.0
GHSA-vvgc-356p-c3xwmediumgolang.org/x/netv0.30.00.38.0
GO-2025-3488highgolang.org/x/oauth2v0.23.00.27.0
GHSA-6v2p-p543-phr9highgolang.org/x/oauth2v0.23.00.27.0
GO-2025-3750unknownstdlib1.23.81.23.10
GO-2025-3751unknownstdlib1.23.81.23.10
GO-2025-3849unknownstdlib1.23.81.23.12
GO-2025-3956unknownstdlib1.23.81.23.12
GO-2025-4006unknownstdlib1.23.81.24.8
GO-2025-4007unknownstdlib1.23.81.24.9
GO-2025-4008unknownstdlib1.23.81.24.8
GO-2025-4009unknownstdlib1.23.81.24.8
GO-2025-4010unknownstdlib1.23.81.24.8
GO-2025-4011unknownstdlib1.23.81.24.8
GO-2025-4012unknownstdlib1.23.81.24.8
GO-2025-4013unknownstdlib1.23.81.24.8
GO-2025-4014unknownstdlib1.23.81.24.8
GO-2025-4015unknownstdlib1.23.81.24.8
GO-2025-4155unknownstdlib1.23.81.24.11
GO-2025-4175unknownstdlib1.23.81.24.11
GO-2026-4337unknownstdlib1.23.81.24.13
GO-2026-4340unknownstdlib1.23.81.24.12
GO-2026-4341unknownstdlib1.23.81.24.12
GO-2026-4342unknownstdlib1.23.81.24.12
GO-2026-4403unknownstdlib1.23.81.23.9
GO-2025-3749unknownstdlib1.24.21.24.4
GO-2025-3750unknownstdlib1.24.21.23.10
GO-2025-3751unknownstdlib1.24.21.23.10
GO-2025-3849unknownstdlib1.24.21.23.12
GO-2025-3956unknownstdlib1.24.21.23.12
GO-2025-4006unknownstdlib1.24.21.24.8
GO-2025-4007unknownstdlib1.24.21.24.9
GO-2025-4008unknownstdlib1.24.21.24.8
GO-2025-4009unknownstdlib1.24.21.24.8
GO-2025-4010unknownstdlib1.24.21.24.8
GO-2025-4011unknownstdlib1.24.21.24.8
GO-2025-4012unknownstdlib1.24.21.24.8
GO-2025-4013unknownstdlib1.24.21.24.8
GO-2025-4014unknownstdlib1.24.21.24.8
GO-2025-4015unknownstdlib1.24.21.24.8
GO-2025-4155unknownstdlib1.24.21.24.11
GO-2025-4175unknownstdlib1.24.21.24.11
GO-2026-4337unknownstdlib1.24.21.24.13
GO-2026-4340unknownstdlib1.24.21.24.12
GO-2026-4341unknownstdlib1.24.21.24.12
GO-2026-4342unknownstdlib1.24.21.24.12
GO-2026-4403unknownstdlib1.24.21.23.9

Software Bill of Materials

upstream components (396)
  • alpine-baselayout 3.7.0-r0
  • alpine-baselayout-data 3.7.0-r0
  • alpine-keys 2.5-r0
  • alpine-release 3.22.2-r0
  • apk-tools 2.14.9-r3
  • bash 5.2.37-r0
  • brotli-libs 1.1.0-r2
  • busybox 1.37.0-r20
  • busybox-binsh 1.37.0-r20
  • c-ares 1.34.5-r0
  • ca-certificates-bundle 20250911-r0
  • cloud.google.com/go/auth v0.17.0
  • cloud.google.com/go/auth v0.17.0
  • cloud.google.com/go/auth v0.17.0
  • cloud.google.com/go/auth/oauth2adapt v0.2.8
  • cloud.google.com/go/auth/oauth2adapt v0.2.8
  • cloud.google.com/go/auth/oauth2adapt v0.2.8
  • cloud.google.com/go/compute/metadata v0.9.0
  • cloud.google.com/go/compute/metadata v0.9.0
  • cloud.google.com/go/compute/metadata v0.9.0
  • cloud.google.com/go/iam v1.5.2
  • cloud.google.com/go/iam v1.5.2
  • cloud.google.com/go/iam v1.5.2
  • cloud.google.com/go/kms v1.23.2
  • cloud.google.com/go/kms v1.23.2
  • cloud.google.com/go/longrunning v0.6.7
  • cloud.google.com/go/longrunning v0.7.0
  • cloud.google.com/go/longrunning v0.7.0
  • cloud.google.com/go/security v1.19.2
  • cloud.google.com/go/security v1.19.2
  • curl 8.14.1-r2
  • dario.cat/mergo v1.0.1
  • dario.cat/mergo v1.0.1
  • dario.cat/mergo v1.0.1
  • filippo.io/edwards25519 v1.1.0
  • filippo.io/edwards25519 v1.1.0
  • filippo.io/edwards25519 v1.1.0
  • github.com/AndreasBriese/bbloom v0.0.0-20190825152654-46b345b51c96
  • github.com/AndreasBriese/bbloom v0.0.0-20190825152654-46b345b51c96
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.19.1
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.19.1
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.19.1
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.0
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.0
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.0
  • github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2
  • github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2
  • github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0
  • github.com/AzureAD/microsoft-authentication-library-for-go v1.5.0
  • github.com/AzureAD/microsoft-authentication-library-for-go v1.5.0
  • github.com/AzureAD/microsoft-authentication-library-for-go v1.5.0
  • github.com/Masterminds/goutils v1.1.1
  • github.com/Masterminds/goutils v1.1.1
  • github.com/Masterminds/goutils v1.1.1
  • github.com/Masterminds/semver/v3 v3.3.0
  • github.com/Masterminds/semver/v3 v3.3.1
  • github.com/Masterminds/semver/v3 v3.3.1
  • github.com/Masterminds/sprig/v3 v3.3.0
  • github.com/Masterminds/sprig/v3 v3.3.0
  • github.com/Masterminds/sprig/v3 v3.3.0
  • github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
  • github.com/aws/aws-sdk-go v1.55.7
  • github.com/aws/aws-sdk-go-v2 v1.39.5
  • github.com/aws/aws-sdk-go-v2 v1.39.5
  • github.com/aws/aws-sdk-go-v2/config v1.31.16
  • github.com/aws/aws-sdk-go-v2/config v1.31.16
  • github.com/aws/aws-sdk-go-v2/credentials v1.18.20
  • github.com/aws/aws-sdk-go-v2/credentials v1.18.20
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.12
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.12
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.12
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.12
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.12
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.12
  • github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4
  • github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.2
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.2
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.12
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.12
  • github.com/aws/aws-sdk-go-v2/service/kms v1.47.0
  • github.com/aws/aws-sdk-go-v2/service/kms v1.47.0
  • github.com/aws/aws-sdk-go-v2/service/sso v1.30.0
  • github.com/aws/aws-sdk-go-v2/service/sso v1.30.0
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.4
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.4
  • github.com/aws/aws-sdk-go-v2/service/sts v1.39.0
  • github.com/aws/aws-sdk-go-v2/service/sts v1.39.0
  • github.com/aws/smithy-go v1.23.1
  • github.com/aws/smithy-go v1.23.1
  • github.com/beorn7/perks v1.0.1
  • github.com/beorn7/perks v1.0.1
  • github.com/boombuler/barcode v1.0.1
  • github.com/ccoveille/go-safecast/v2 v2.0.0
  • github.com/ccoveille/go-safecast/v2 v2.0.0
  • github.com/cenkalti/backoff/v4 v4.3.0
  • github.com/cespare/xxhash v1.1.0
  • github.com/cespare/xxhash v1.1.0
  • github.com/cespare/xxhash/v2 v2.3.0
  • github.com/cespare/xxhash/v2 v2.3.0
  • github.com/chzyer/readline v1.5.1
  • github.com/chzyer/readline v1.5.1
  • github.com/chzyer/readline v1.5.1
  • github.com/coreos/go-oidc/v3 v3.17.0
  • github.com/coreos/go-oidc/v3 v3.17.0
  • github.com/coreos/go-systemd/v22 v22.6.0
  • github.com/coreos/go-systemd/v22 v22.6.0
  • github.com/cpuguy83/go-md2man/v2 v2.0.7
  • github.com/cpuguy83/go-md2man/v2 v2.0.7
  • github.com/cpuguy83/go-md2man/v2 v2.0.7
  • github.com/dgraph-io/badger v1.6.2
  • github.com/dgraph-io/badger v1.6.2
  • github.com/dgraph-io/badger/v2 v2.2007.4
  • github.com/dgraph-io/badger/v2 v2.2007.4
  • github.com/dgraph-io/ristretto v0.1.0
  • github.com/dgraph-io/ristretto v0.1.1
  • github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13
  • github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13
  • github.com/dustin/go-humanize v1.0.1
  • github.com/dustin/go-humanize v1.0.1
  • github.com/fatih/color v1.18.0
  • github.com/felixge/httpsnoop v1.0.4
  • github.com/felixge/httpsnoop v1.0.4
  • github.com/felixge/httpsnoop v1.0.4
  • github.com/fxamacker/cbor/v2 v2.9.0
  • github.com/fxamacker/cbor/v2 v2.9.0
  • github.com/fxamacker/cbor/v2 v2.9.0
  • github.com/go-chi/chi/v5 v5.2.3
  • github.com/go-chi/chi/v5 v5.2.3
  • github.com/go-jose/go-jose/v3 v3.0.4
  • github.com/go-jose/go-jose/v3 v3.0.4
  • github.com/go-jose/go-jose/v3 v3.0.4
  • github.com/go-jose/go-jose/v4 v4.1.3
  • github.com/go-jose/go-jose/v4 v4.1.3
  • github.com/go-logr/logr v1.4.3
  • github.com/go-logr/logr v1.4.3
  • github.com/go-logr/logr v1.4.3
  • github.com/go-logr/stdr v1.2.2
  • github.com/go-logr/stdr v1.2.2
  • github.com/go-logr/stdr v1.2.2
  • github.com/go-sql-driver/mysql v1.8.1
  • github.com/go-sql-driver/mysql v1.9.2
  • github.com/golang-jwt/jwt/v5 v5.3.0
  • github.com/golang-jwt/jwt/v5 v5.3.0
  • github.com/golang-jwt/jwt/v5 v5.3.0
  • github.com/golang/glog v1.2.5
  • github.com/golang/glog v1.2.5
  • github.com/golang/protobuf v1.5.4
  • github.com/golang/protobuf v1.5.4
  • github.com/golang/snappy v0.0.4
  • github.com/golang/snappy v0.0.4
  • github.com/google/btree v1.1.2
  • github.com/google/btree v1.1.2
  • github.com/google/btree v1.1.3
  • github.com/google/certificate-transparency-go v1.1.6
  • github.com/google/certificate-transparency-go v1.1.7
  • github.com/google/certificate-transparency-go v1.3.2
  • github.com/google/go-tpm v0.9.6
  • github.com/google/go-tpm v0.9.7
  • github.com/google/go-tpm v0.9.7
  • github.com/google/go-tspi v0.3.0
  • github.com/google/go-tspi v0.3.0
  • github.com/google/go-tspi v0.3.0
  • github.com/google/s2a-go v0.1.9
  • github.com/google/s2a-go v0.1.9
  • github.com/google/s2a-go v0.1.9
  • github.com/google/uuid v1.6.0
  • github.com/google/uuid v1.6.0
  • github.com/google/uuid v1.6.0
  • github.com/googleapis/enterprise-certificate-proxy v0.3.6
  • github.com/googleapis/enterprise-certificate-proxy v0.3.7
  • github.com/googleapis/enterprise-certificate-proxy v0.3.7
  • github.com/googleapis/gax-go/v2 v2.15.0
  • github.com/googleapis/gax-go/v2 v2.15.0
  • github.com/googleapis/gax-go/v2 v2.15.0
  • github.com/hashicorp/errwrap v1.1.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-hclog v1.6.3
  • github.com/hashicorp/go-multierror v1.1.1
  • github.com/hashicorp/go-retryablehttp v0.7.8
  • github.com/hashicorp/go-rootcerts v1.0.2
  • github.com/hashicorp/go-secure-stdlib/awsutil v0.3.0
  • github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0
  • github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
  • github.com/hashicorp/go-sockaddr v1.0.7
  • github.com/hashicorp/go-uuid v1.0.2
  • github.com/hashicorp/hcl v1.0.1-vault-7
  • github.com/hashicorp/vault/api v1.22.0
  • github.com/hashicorp/vault/api/auth/approle v0.11.0
  • github.com/hashicorp/vault/api/auth/aws v0.11.0
  • github.com/hashicorp/vault/api/auth/kubernetes v0.10.0
  • github.com/huandu/xstrings v1.5.0
  • github.com/huandu/xstrings v1.5.0
  • github.com/huandu/xstrings v1.5.0
  • github.com/jackc/pgpassfile v1.0.0
  • github.com/jackc/pgpassfile v1.0.0
  • github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a
  • github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
  • github.com/jackc/pgx/v5 v5.6.0
  • github.com/jackc/pgx/v5 v5.7.5
  • github.com/jackc/puddle/v2 v2.2.1
  • github.com/jackc/puddle/v2 v2.2.2
  • github.com/jmespath/go-jmespath v0.4.0
  • github.com/klauspost/compress v1.18.0
  • github.com/klauspost/compress v1.18.0
  • github.com/kylelemons/godebug v1.1.0
  • github.com/kylelemons/godebug v1.1.0
  • github.com/kylelemons/godebug v1.1.0
  • github.com/manifoldco/promptui v0.9.0
  • github.com/manifoldco/promptui v0.9.0
  • github.com/manifoldco/promptui v0.9.0
  • github.com/mattn/go-colorable v0.1.14
  • github.com/mattn/go-colorable v0.1.14
  • github.com/mattn/go-isatty v0.0.20
  • github.com/mattn/go-isatty v0.0.20
  • github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d
  • github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d
  • github.com/mitchellh/copystructure v1.2.0
  • github.com/mitchellh/copystructure v1.2.0
  • github.com/mitchellh/copystructure v1.2.0
  • github.com/mitchellh/mapstructure v1.5.0
  • github.com/mitchellh/reflectwalk v1.0.2
  • github.com/mitchellh/reflectwalk v1.0.2
  • github.com/mitchellh/reflectwalk v1.0.2
  • github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
  • github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
  • github.com/newrelic/go-agent/v3 v3.42.0
  • github.com/newrelic/go-agent/v3 v3.42.0
  • github.com/peterbourgon/diskv/v3 v3.0.1
  • github.com/peterbourgon/diskv/v3 v3.0.1
  • github.com/peterbourgon/diskv/v3 v3.0.1
  • github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
  • github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
  • github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
  • github.com/pkg/errors v0.9.1
  • github.com/pkg/errors v0.9.1
  • github.com/pkg/errors v0.9.1
  • github.com/pquerna/otp v1.5.0
  • github.com/prometheus/client_golang v1.23.2
  • github.com/prometheus/client_golang v1.23.2
  • github.com/prometheus/client_model v0.6.2
  • github.com/prometheus/client_model v0.6.2
  • github.com/prometheus/common v0.66.1
  • github.com/prometheus/common v0.66.1
  • github.com/prometheus/procfs v0.16.1
  • github.com/prometheus/procfs v0.16.1
  • github.com/rs/xid v1.6.0
  • github.com/rs/xid v1.6.0
  • github.com/russross/blackfriday/v2 v2.1.0
  • github.com/russross/blackfriday/v2 v2.1.0
  • github.com/russross/blackfriday/v2 v2.1.0
  • github.com/ryanuber/go-glob v1.0.0
  • github.com/schollz/jsonstore v1.1.0
  • github.com/schollz/jsonstore v1.1.0
  • github.com/schollz/jsonstore v1.1.0
  • github.com/shopspring/decimal v1.4.0
  • github.com/shopspring/decimal v1.4.0
  • github.com/shopspring/decimal v1.4.0
  • github.com/shurcooL/sanitized_anchor_name v1.0.0
  • github.com/shurcooL/sanitized_anchor_name v1.0.0
  • github.com/sirupsen/logrus v1.9.3
  • github.com/sirupsen/logrus v1.9.3
  • github.com/slackhq/nebula v1.9.7
  • github.com/slackhq/nebula v1.9.7
  • github.com/smallstep/certificates v0.29.0
  • github.com/smallstep/certificates v0.29.0
  • github.com/smallstep/certinfo v1.15.0
  • github.com/smallstep/cli v0.29.0
  • github.com/smallstep/cli-utils v0.12.2
  • github.com/smallstep/cli-utils v0.12.2
  • github.com/smallstep/cli-utils v0.12.2
  • github.com/smallstep/go-attestation v0.4.4-0.20241119153605-2306d5b464ca
  • github.com/smallstep/go-attestation v0.4.4-0.20241119153605-2306d5b464ca
  • github.com/smallstep/go-attestation v0.4.4-0.20241119153605-2306d5b464ca
  • github.com/smallstep/linkedca v0.25.0
  • github.com/smallstep/linkedca v0.25.0
  • github.com/smallstep/nosql v0.7.0
  • github.com/smallstep/nosql v0.7.0
  • github.com/smallstep/pkcs7 v0.2.1
  • github.com/smallstep/pkcs7 v0.2.1
  • github.com/smallstep/scep v0.0.0-20250318231241-a25cabb69492
  • github.com/smallstep/scep v0.0.0-20250318231241-a25cabb69492
  • github.com/smallstep/step-kms-plugin v0.15.2
  • github.com/smallstep/truststore v0.13.0
  • github.com/smallstep/zcrypto v0.0.0-20221001003018-1ab2364d2a91
  • github.com/smallstep/zlint v0.0.0-20220930192201-67fb4aa21910
  • github.com/spf13/cast v1.7.0
  • github.com/spf13/cast v1.7.0
  • github.com/spf13/cast v1.7.0
  • github.com/spf13/cobra v1.10.1
  • github.com/spf13/pflag v1.0.10
  • github.com/urfave/cli v1.22.17
  • github.com/urfave/cli v1.22.17
  • github.com/urfave/cli v1.22.17
  • github.com/weppos/publicsuffix-go v0.20.0
  • github.com/x448/float16 v0.8.4
  • github.com/x448/float16 v0.8.4
  • github.com/x448/float16 v0.8.4
  • go.etcd.io/bbolt v1.3.10
  • go.etcd.io/bbolt v1.4.0
  • go.mozilla.org/pkcs7 v0.9.0
  • go.opentelemetry.io/auto/sdk v1.1.0
  • go.opentelemetry.io/auto/sdk v1.2.1
  • go.opentelemetry.io/auto/sdk v1.2.1
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0
  • go.opentelemetry.io/otel v1.37.0
  • go.opentelemetry.io/otel v1.38.0
  • go.opentelemetry.io/otel v1.38.0
  • go.opentelemetry.io/otel/metric v1.37.0
  • go.opentelemetry.io/otel/metric v1.38.0
  • go.opentelemetry.io/otel/metric v1.38.0
  • go.opentelemetry.io/otel/trace v1.37.0
  • go.opentelemetry.io/otel/trace v1.38.0
  • go.opentelemetry.io/otel/trace v1.38.0
  • go.step.sm/crypto v0.74.0
  • go.step.sm/crypto v0.74.0
  • go.step.sm/crypto v0.74.0
  • go.yaml.in/yaml/v2 v2.4.2
  • go.yaml.in/yaml/v2 v2.4.2
  • golang.org/x/crypto v0.45.0
  • golang.org/x/crypto v0.45.0
  • golang.org/x/crypto v0.45.0
  • golang.org/x/net v0.47.0
  • golang.org/x/net v0.47.0
  • golang.org/x/net v0.47.0
  • golang.org/x/oauth2 v0.32.0
  • golang.org/x/oauth2 v0.33.0
  • golang.org/x/oauth2 v0.33.0
  • golang.org/x/sync v0.18.0
  • golang.org/x/sync v0.18.0
  • golang.org/x/sync v0.18.0
  • golang.org/x/sys v0.38.0
  • golang.org/x/sys v0.38.0
  • golang.org/x/sys v0.38.0
  • golang.org/x/term v0.37.0
  • golang.org/x/term v0.37.0
  • golang.org/x/term v0.37.0
  • golang.org/x/text v0.31.0
  • golang.org/x/text v0.31.0
  • golang.org/x/text v0.31.0
  • golang.org/x/time v0.14.0
  • golang.org/x/time v0.14.0
  • golang.org/x/time v0.14.0
  • google.golang.org/api v0.254.0
  • google.golang.org/api v0.256.0
  • google.golang.org/api v0.256.0
  • google.golang.org/genproto v0.0.0-20250603155806-513f23925822
  • google.golang.org/genproto v0.0.0-20250603155806-513f23925822
  • google.golang.org/genproto v0.0.0-20250603155806-513f23925822
  • google.golang.org/genproto/googleapis/api v0.0.0-20250818200422-3122310a409c
  • google.golang.org/genproto/googleapis/api v0.0.0-20251022142026-3a174f9686a8
  • google.golang.org/genproto/googleapis/api v0.0.0-20251022142026-3a174f9686a8
  • google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8
  • google.golang.org/genproto/googleapis/rpc v0.0.0-20251103181224-f26f9409b101
  • google.golang.org/genproto/googleapis/rpc v0.0.0-20251103181224-f26f9409b101
  • google.golang.org/grpc v1.76.0
  • google.golang.org/grpc v1.77.0
  • google.golang.org/grpc v1.77.0
  • google.golang.org/protobuf v1.36.10
  • google.golang.org/protobuf v1.36.10
  • google.golang.org/protobuf v1.36.10
  • jq 1.8.1-r0
  • libapk2 2.14.9-r3
  • libcrypto3 3.5.4-r0
  • libcurl 8.14.1-r2
  • libidn2 2.3.7-r0
  • libncursesw 6.5_p20250503-r0
  • libpsl 0.21.5-r3
  • libssl3 3.5.4-r0
  • libunistring 1.3-r0
  • musl 1.2.5-r10
  • musl-utils 1.2.5-r10
  • ncurses-terminfo-base 6.5_p20250503-r0
  • nghttp2-libs 1.65.0-r0
  • oniguruma 6.9.10-r0
  • readline 8.2.13-r1
  • scanelf 1.3.8-r1
  • software.sslmate.com/src/go-pkcs12 v0.6.0
  • ssl_client 1.37.0-r20
  • stdlib go1.25.5
  • stdlib go1.25.5
  • stdlib go1.25.5
  • tzdata 2025b-r0
  • zlib 1.3.1-r2
  • zstd-libs 1.5.7-r0
hardened components (303)
  • acl 2.3.2
  • attr 2.5.2
  • bash-interactive 5.2p37
  • cloud.google.com/go/auth v0.17.0
  • cloud.google.com/go/auth v0.9.9
  • cloud.google.com/go/auth/oauth2adapt v0.2.4
  • cloud.google.com/go/auth/oauth2adapt v0.2.8
  • cloud.google.com/go/compute/metadata v0.5.2
  • cloud.google.com/go/compute/metadata v0.9.0
  • cloud.google.com/go/iam v1.2.1
  • cloud.google.com/go/iam v1.5.2
  • cloud.google.com/go/kms v1.23.2
  • cloud.google.com/go/longrunning v0.6.2
  • cloud.google.com/go/longrunning v0.7.0
  • cloud.google.com/go/security v1.18.2
  • cloud.google.com/go/security v1.19.2
  • coreutils 9.5
  • dario.cat/mergo v1.0.1
  • dario.cat/mergo v1.0.1
  • filippo.io/edwards25519 v1.1.0
  • filippo.io/edwards25519 v1.1.0
  • gcc 13.3.0
  • gcc 13.3.0
  • github.com/AndreasBriese/bbloom v0.0.0-20190825152654-46b345b51c96
  • github.com/AndreasBriese/bbloom v0.0.0-20190825152654-46b345b51c96
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.14.0
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.19.1
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.0
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0
  • github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0
  • github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2
  • github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys v0.10.0
  • github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal v0.7.1
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0
  • github.com/AzureAD/microsoft-authentication-library-for-go v1.2.2
  • github.com/AzureAD/microsoft-authentication-library-for-go v1.5.0
  • github.com/Masterminds/goutils v1.1.1
  • github.com/Masterminds/goutils v1.1.1
  • github.com/Masterminds/semver/v3 v3.3.0
  • github.com/Masterminds/semver/v3 v3.3.1
  • github.com/Masterminds/sprig/v3 v3.3.0
  • github.com/Masterminds/sprig/v3 v3.3.0
  • github.com/ThalesIgnite/crypto11 v1.2.5
  • github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
  • github.com/aws/aws-sdk-go v1.55.7
  • github.com/aws/aws-sdk-go-v2 v1.39.5
  • github.com/aws/aws-sdk-go-v2/config v1.31.16
  • github.com/aws/aws-sdk-go-v2/credentials v1.18.20
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.12
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.12
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.12
  • github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.2
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.12
  • github.com/aws/aws-sdk-go-v2/service/kms v1.47.0
  • github.com/aws/aws-sdk-go-v2/service/sso v1.30.0
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.4
  • github.com/aws/aws-sdk-go-v2/service/sts v1.39.0
  • github.com/aws/smithy-go v1.23.1
  • github.com/beorn7/perks v1.0.1
  • github.com/beorn7/perks v1.0.1
  • github.com/boombuler/barcode v1.0.1
  • github.com/ccoveille/go-safecast/v2 v2.0.0
  • github.com/cenkalti/backoff/v4 v4.3.0
  • github.com/cespare/xxhash v1.1.0
  • github.com/cespare/xxhash v1.1.0
  • github.com/cespare/xxhash/v2 v2.3.0
  • github.com/cespare/xxhash/v2 v2.3.0
  • github.com/chzyer/readline v1.5.1
  • github.com/chzyer/readline v1.5.1
  • github.com/coreos/go-oidc/v3 v3.11.0
  • github.com/coreos/go-oidc/v3 v3.17.0
  • github.com/coreos/go-systemd/v22 v22.6.0
  • github.com/cpuguy83/go-md2man/v2 v2.0.5
  • github.com/cpuguy83/go-md2man/v2 v2.0.7
  • github.com/dgraph-io/badger v1.6.2
  • github.com/dgraph-io/badger v1.6.2
  • github.com/dgraph-io/badger/v2 v2.2007.4
  • github.com/dgraph-io/badger/v2 v2.2007.4
  • github.com/dgraph-io/ristretto v0.1.0
  • github.com/dgraph-io/ristretto v0.1.1
  • github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13
  • github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13
  • github.com/dustin/go-humanize v1.0.1
  • github.com/dustin/go-humanize v1.0.1
  • github.com/fatih/color v1.18.0
  • github.com/felixge/httpsnoop v1.0.4
  • github.com/felixge/httpsnoop v1.0.4
  • github.com/fxamacker/cbor/v2 v2.7.0
  • github.com/fxamacker/cbor/v2 v2.9.0
  • github.com/go-chi/chi/v5 v5.1.0
  • github.com/go-chi/chi/v5 v5.2.3
  • github.com/go-jose/go-jose/v3 v3.0.3
  • github.com/go-jose/go-jose/v3 v3.0.4
  • github.com/go-jose/go-jose/v4 v4.0.2
  • github.com/go-jose/go-jose/v4 v4.1.3
  • github.com/go-logr/logr v1.4.2
  • github.com/go-logr/logr v1.4.3
  • github.com/go-logr/stdr v1.2.2
  • github.com/go-logr/stdr v1.2.2
  • github.com/go-piv/piv-go/v2 v2.4.0
  • github.com/go-sql-driver/mysql v1.8.1
  • github.com/go-sql-driver/mysql v1.8.1
  • github.com/golang-jwt/jwt/v5 v5.2.1
  • github.com/golang-jwt/jwt/v5 v5.3.0
  • github.com/golang/glog v1.2.2
  • github.com/golang/glog v1.2.5
  • github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
  • github.com/golang/protobuf v1.5.4
  • github.com/golang/protobuf v1.5.4
  • github.com/golang/snappy v0.0.4
  • github.com/golang/snappy v0.0.4
  • github.com/google/btree v1.1.2
  • github.com/google/btree v1.1.2
  • github.com/google/certificate-transparency-go v1.1.7
  • github.com/google/certificate-transparency-go v1.1.7
  • github.com/google/go-tpm v0.9.1
  • github.com/google/go-tpm v0.9.7
  • github.com/google/go-tspi v0.3.0
  • github.com/google/go-tspi v0.3.0
  • github.com/google/s2a-go v0.1.8
  • github.com/google/s2a-go v0.1.9
  • github.com/google/uuid v1.6.0
  • github.com/google/uuid v1.6.0
  • github.com/googleapis/enterprise-certificate-proxy v0.3.4
  • github.com/googleapis/enterprise-certificate-proxy v0.3.7
  • github.com/googleapis/gax-go/v2 v2.13.0
  • github.com/googleapis/gax-go/v2 v2.15.0
  • github.com/hashicorp/errwrap v1.1.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-hclog v1.6.3
  • github.com/hashicorp/go-multierror v1.1.1
  • github.com/hashicorp/go-retryablehttp v0.7.8
  • github.com/hashicorp/go-rootcerts v1.0.2
  • github.com/hashicorp/go-secure-stdlib/awsutil v0.3.0
  • github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0
  • github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
  • github.com/hashicorp/go-sockaddr v1.0.7
  • github.com/hashicorp/go-uuid v1.0.2
  • github.com/hashicorp/hcl v1.0.1-vault-7
  • github.com/hashicorp/vault/api v1.22.0
  • github.com/hashicorp/vault/api/auth/approle v0.11.0
  • github.com/hashicorp/vault/api/auth/aws v0.11.0
  • github.com/hashicorp/vault/api/auth/kubernetes v0.10.0
  • github.com/huandu/xstrings v1.5.0
  • github.com/huandu/xstrings v1.5.0
  • github.com/jackc/pgpassfile v1.0.0
  • github.com/jackc/pgpassfile v1.0.0
  • github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a
  • github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a
  • github.com/jackc/pgx/v5 v5.6.0
  • github.com/jackc/pgx/v5 v5.6.0
  • github.com/jackc/puddle/v2 v2.2.1
  • github.com/jackc/puddle/v2 v2.2.1
  • github.com/jmespath/go-jmespath v0.4.0
  • github.com/klauspost/compress v1.17.9
  • github.com/klauspost/compress v1.18.0
  • github.com/kylelemons/godebug v1.1.0
  • github.com/kylelemons/godebug v1.1.0
  • github.com/manifoldco/promptui v0.9.0
  • github.com/manifoldco/promptui v0.9.0
  • github.com/mattn/go-colorable v0.1.13
  • github.com/mattn/go-colorable v0.1.14
  • github.com/mattn/go-isatty v0.0.20
  • github.com/mattn/go-isatty v0.0.20
  • github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d
  • github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d
  • github.com/miekg/pkcs11 v1.1.1
  • github.com/mitchellh/copystructure v1.2.0
  • github.com/mitchellh/copystructure v1.2.0
  • github.com/mitchellh/mapstructure v1.5.0
  • github.com/mitchellh/reflectwalk v1.0.2
  • github.com/mitchellh/reflectwalk v1.0.2
  • github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
  • github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
  • github.com/newrelic/go-agent/v3 v3.35.1
  • github.com/newrelic/go-agent/v3 v3.42.0
  • github.com/peterbourgon/diskv/v3 v3.0.1
  • github.com/peterbourgon/diskv/v3 v3.0.1
  • github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
  • github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
  • github.com/pkg/errors v0.9.1
  • github.com/pkg/errors v0.9.1
  • github.com/pquerna/otp v1.4.0
  • github.com/prometheus/client_golang v1.20.5
  • github.com/prometheus/client_golang v1.23.2
  • github.com/prometheus/client_model v0.6.1
  • github.com/prometheus/client_model v0.6.2
  • github.com/prometheus/common v0.55.0
  • github.com/prometheus/common v0.66.1
  • github.com/prometheus/procfs v0.15.1
  • github.com/prometheus/procfs v0.16.1
  • github.com/rs/xid v1.6.0
  • github.com/rs/xid v1.6.0
  • github.com/russross/blackfriday/v2 v2.1.0
  • github.com/russross/blackfriday/v2 v2.1.0
  • github.com/ryanuber/go-glob v1.0.0
  • github.com/schollz/jsonstore v1.1.0
  • github.com/schollz/jsonstore v1.1.0
  • github.com/shopspring/decimal v1.4.0
  • github.com/shopspring/decimal v1.4.0
  • github.com/shurcooL/sanitized_anchor_name v1.0.0
  • github.com/shurcooL/sanitized_anchor_name v1.0.0
  • github.com/sirupsen/logrus v1.9.3
  • github.com/sirupsen/logrus v1.9.3
  • github.com/slackhq/nebula v1.9.4
  • github.com/slackhq/nebula v1.9.7
  • github.com/smallstep/certificates UNKNOWN
  • github.com/smallstep/certificates v0.28.0
  • github.com/smallstep/certinfo v1.12.2
  • github.com/smallstep/cli UNKNOWN
  • github.com/smallstep/cli-utils v0.10.0
  • github.com/smallstep/cli-utils v0.12.2
  • github.com/smallstep/go-attestation v0.4.4-0.20240109183208-413678f90935
  • github.com/smallstep/go-attestation v0.4.4-0.20241119153605-2306d5b464ca
  • github.com/smallstep/linkedca v0.25.0
  • github.com/smallstep/nosql v0.7.0
  • github.com/smallstep/nosql v0.7.0
  • github.com/smallstep/pkcs7 v0.0.0-20240911091500-b1cae6277023
  • github.com/smallstep/pkcs7 v0.2.1
  • github.com/smallstep/scep v0.0.0-20240926084937-8cf1ca453101
  • github.com/smallstep/scep v0.0.0-20250318231241-a25cabb69492
  • github.com/smallstep/truststore v0.13.0
  • github.com/smallstep/zcrypto v0.0.0-20221001003018-1ab2364d2a91
  • github.com/smallstep/zlint v0.0.0-20220930192201-67fb4aa21910
  • github.com/spf13/cast v1.7.0
  • github.com/spf13/cast v1.7.0
  • github.com/thales-e-security/pool v0.0.2
  • github.com/urfave/cli v1.22.16
  • github.com/urfave/cli v1.22.17
  • github.com/weppos/publicsuffix-go v0.20.0
  • github.com/x448/float16 v0.8.4
  • github.com/x448/float16 v0.8.4
  • glibc 2.40-66
  • gmp-with-cxx 6.3.0
  • gnugrep 3.11
  • gnused 4.9
  • go.etcd.io/bbolt v1.3.10
  • go.etcd.io/bbolt v1.3.10
  • go.mozilla.org/pkcs7 v0.9.0
  • go.opencensus.io v0.24.0
  • go.opentelemetry.io/auto/sdk v1.2.1
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0
  • go.opentelemetry.io/otel v1.29.0
  • go.opentelemetry.io/otel v1.38.0
  • go.opentelemetry.io/otel/metric v1.29.0
  • go.opentelemetry.io/otel/metric v1.38.0
  • go.opentelemetry.io/otel/trace v1.29.0
  • go.opentelemetry.io/otel/trace v1.38.0
  • go.step.sm/crypto v0.54.0
  • go.step.sm/crypto v0.74.0
  • go.step.sm/linkedca v0.22.2
  • go.yaml.in/yaml/v2 v2.4.2
  • golang.org/x/crypto v0.28.0
  • golang.org/x/crypto v0.45.0
  • golang.org/x/exp v0.0.0-20240318143956-a85f2c67cd81
  • golang.org/x/net v0.30.0
  • golang.org/x/net v0.47.0
  • golang.org/x/oauth2 v0.23.0
  • golang.org/x/oauth2 v0.33.0
  • golang.org/x/sync v0.18.0
  • golang.org/x/sync v0.8.0
  • golang.org/x/sys v0.26.0
  • golang.org/x/sys v0.38.0
  • golang.org/x/term v0.25.0
  • golang.org/x/term v0.37.0
  • golang.org/x/text v0.19.0
  • golang.org/x/text v0.31.0
  • golang.org/x/time v0.14.0
  • golang.org/x/time v0.7.0
  • google.golang.org/api v0.203.0
  • google.golang.org/api v0.256.0
  • google.golang.org/genproto v0.0.0-20241015192408-796eee8c2d53
  • google.golang.org/genproto v0.0.0-20250603155806-513f23925822
  • google.golang.org/genproto/googleapis/api v0.0.0-20241007155032-5fefd90f89a9
  • google.golang.org/genproto/googleapis/api v0.0.0-20251022142026-3a174f9686a8
  • google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53
  • google.golang.org/genproto/googleapis/rpc v0.0.0-20251103181224-f26f9409b101
  • google.golang.org/grpc v1.67.1
  • google.golang.org/grpc v1.77.0
  • google.golang.org/protobuf v1.35.1
  • google.golang.org/protobuf v1.36.10
  • iana-etc 20240318
  • k8s.io/klog/v2 v2.100.1
  • libidn2 2.3.7
  • libunistring 1.2
  • mailcap 2.1.54
  • ncurses 6.4.20221231
  • nss-cacert 3.111
  • pcre2 10.44
  • pcsclite 2.3.0
  • readline 8.2p13
  • software.sslmate.com/src/go-pkcs12 v0.5.0
  • stdlib go1.23.8
  • stdlib go1.24.2
  • step-ca 0.29.0
  • step-cli 0.28.0
  • tzdata 2025b
  • xgcc 13.3.0

Download SBOMs

Upstream SBOM Hardened SBOM

Usage

$ podman pull ghcr.io/armorred/step-ca:0

Verify Signature

$ cosign verify --key https://armorred.org/cosign.pub ghcr.io/armorred/step-ca:0