Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Package lookup failures

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update github.com/oapi-codegen/oapi-codegen/v2 digest to d232e9e
• chore(deps): update module github.com/onsi/gomega to v1.34.1
• chore(deps): update module golang.org/x/crypto to v0.26.0
• chore(deps): update module golang.org/x/sync to v0.8.0
• chore(deps): update module google.golang.org/api to v0.194.0
• chore(deps): update module google.golang.org/grpc to v1.66.0
• chore(deps): update tonistiigi/xx docker tag to v1.5.0
• chore(deps): update azure sdk to v6 (major) (github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5, github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v5)
• chore(deps): update docker to v27 (major) (github.com/docker/cli, github.com/docker/docker)

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• chore(deps): update github.com/aquasecurity/trivy-db digest to ed690fa
• chore(deps): update go patches (github.com/Checkmarx/kics/v2, github.com/anchore/stereoscope, github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/cloudformation, github.com/aws/aws-sdk-go-v2/service/pricing, github.com/aws/smithy-go, github.com/compose-spec/compose-go/v2, github.com/containerd/containerd, github.com/docker/cli, github.com/google/go-containerregistry, github.com/moby/sys/mountinfo, github.com/zregvart/helm/v3, gorm.io/driver/postgres, gorm.io/driver/sqlite, gorm.io/gorm, helm.sh/helm/v3)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (go package github.com/Portshift/dockle).

Files affected: scanner/go.mod

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update helm release postgresql to v15.5.26
• chore(deps): update aws-sdk-go-v2 monorepo (github.com/aws/aws-sdk-go-v2/service/ec2, github.com/aws/aws-sdk-go-v2/service/s3)
• chore(deps): update docker.io/bitnami/postgresql docker tag to v16.4.0-debian-12-r4
• chore(deps): update kubernetes (k8s.io/api, k8s.io/apimachinery, k8s.io/cli-runtime, k8s.io/client-go, sigs.k8s.io/kind)
• chore(deps): update makefile (crate-ci/typos, github.com/golangci/golangci-lint, helm/helm, orhun/git-cliff)
• chore(deps): update module cloud.google.com/go/compute to v1.28.0
• chore(deps): update module github.com/anchore/grype to v0.80.0
• chore(deps): update module github.com/anchore/syft to v1.11.1
• chore(deps): update module github.com/aquasecurity/trivy to v0.54.1
• chore(deps): update module github.com/azure/azure-sdk-for-go/sdk/azcore to v1.14.0
• chore(deps): update module github.com/containers/image/v5 to v5.32.2
• chore(deps): update module github.com/cyclonedx/cyclonedx-go to v0.9.0
• chore(deps): update module github.com/docker/compose/v2 to v2.29.2
• chore(deps): update module github.com/heimdalr/dag to v1.5.0
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update module github.com/docker/docker to v25 [security]
• chore(deps): update github.com/anchore/clio digest to 4c50c05

Vulnerabilities

9/50 CVEs have Renovate fixes.

gomod

cli/go.mod

github.com/aws/aws-sdk-go

• GO-2022-0646

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

github.com/mholt/archiver/v3

• GHSA-rhh4-rh7c-7r5v (fixed in > 3.5.1)
• GO-2024-2698

containerruntimediscovery/server/go.mod

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

e2e/go.mod

github.com/aws/aws-sdk-go

• GO-2022-0646

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

github.com/mholt/archiver/v3

• GHSA-rhh4-rh7c-7r5v (fixed in > 3.5.1)
• GO-2024-2698

orchestrator/go.mod

github.com/aws/aws-sdk-go

• GO-2022-0646

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

github.com/mholt/archiver/v3

• GHSA-rhh4-rh7c-7r5v (fixed in > 3.5.1)
• GO-2024-2698

plugins/runner/go.mod

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

plugins/store/kics/go.mod

github.com/aws/aws-sdk-go

• GO-2022-0646

github.com/docker/docker

• GO-2024-3005 (fixed in >= 25.0.6+incompatible)
• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9
• GHSA-v23v-6jw2-98fq (fixed in >= 25.0.6)

provider/go.mod

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

github.com/aws/aws-sdk-go

• GO-2022-0646

github.com/mholt/archiver/v3

• GHSA-rhh4-rh7c-7r5v (fixed in > 3.5.1)
• GO-2024-2698

scanner/go.mod

github.com/aws/aws-sdk-go

• GO-2022-0646

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

github.com/mholt/archiver/v3

• GHSA-rhh4-rh7c-7r5v (fixed in > 3.5.1)
• GO-2024-2698

testenv/go.mod

github.com/docker/docker

• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9

utils/go.mod

github.com/docker/docker

• GO-2024-3005 (fixed in >= 25.0.6+incompatible)
• GHSA-6hwg-w5jg-9c6x
• GHSA-j249-ghv5-7mxv
• GHSA-qrqr-3x5j-2xw9
• GHSA-v23v-6jw2-98fq (fixed in >= 25.0.6)

Detected dependencies

bicep

installation/azure/openclarity.bicep

• Microsoft.Resources/resourceGroups 2024-03-01

installation/azure/openclarityDeployModule.bicep

• Microsoft.Network/networkInterfaces 2024-01-01
• Microsoft.Network/networkSecurityGroups 2024-01-01
• Microsoft.Network/virtualNetworks 2024-01-01
• Microsoft.Network/publicIPAddresses 2024-01-01
• Microsoft.Compute/virtualMachines 2024-03-01
• Microsoft.Compute/virtualMachines/extensions 2024-03-01
• Microsoft.Compute/virtualMachines/extensions 2024-03-01
• Microsoft.Network/networkSecurityGroups 2024-01-01
• Microsoft.Storage/storageAccounts 2023-05-01
• Microsoft.Storage/storageAccounts/blobServices 2023-05-01
• Microsoft.Storage/storageAccounts/blobServices/containers 2023-05-01
• Microsoft.Authorization/roleDefinitions 2022-04-01
• Microsoft.Authorization/roleAssignments 2022-04-01

installation/azure/openclarityDiscoverRole.bicep

• Microsoft.Authorization/roleDefinitions 2022-04-01
• Microsoft.Authorization/roleAssignments 2022-04-01

installation/azure/openclarityManagedIdentity.bicep

• Microsoft.ManagedIdentity/userAssignedIdentities 2023-01-31

installation/azure/openclarityScanRole.bicep

• Microsoft.Authorization/roleDefinitions 2022-04-01
• Microsoft.Authorization/roleAssignments 2022-04-01

docker-compose

installation/docker/docker-compose.postgresql-override.yaml

• docker.io/bitnami/postgresql 16.3.0-debian-12-r23

installation/docker/docker-compose.yml

• nginxinc/nginx-unprivileged 1.27.1
• ghcr.io/openclarity/exploit-db-server v0.3.0
• docker.io/aquasec/trivy 0.54.1
• ghcr.io/openclarity/grype-server v0.7.4
• ghcr.io/openclarity/freshclam-mirror v0.3.1
• ghcr.io/openclarity/yara-rule-server v0.3.0
• swaggerapi/swagger-ui v5.17.14

testenv/docker/asset/docker-compose.override.yml

• alpine 3.18.2@sha256:82d1e9d7ed48a7523bdebc18cf6290bdb97b82302a8a9c27d4fe885949ea94d1

dockerfile

api/server/Dockerfile

• docker/dockerfile 1@sha256:fe40cf4e92cd0c467be2cfc30657a680ae2398318afd50b0c80585784c604f28
• tonistiigi/xx 1.4.0@sha256:0cd3f05c72d6c9b038eb135f91376ee1169ef3a330d34e418e65e2a5c2e9c0d4
• golang 1.23.0-bullseye@sha256:ecef8303ced05b7cd1addf3c8ea98974f9231d4c5a0c230d23b37bb623714a23
• alpine 3.20@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5

cli/Dockerfile

• docker/dockerfile 1@sha256:fe40cf4e92cd0c467be2cfc30657a680ae2398318afd50b0c80585784c604f28
• tonistiigi/xx 1.4.0@sha256:0cd3f05c72d6c9b038eb135f91376ee1169ef3a330d34e418e65e2a5c2e9c0d4
• golang 1.23.0-bullseye@sha256:ecef8303ced05b7cd1addf3c8ea98974f9231d4c5a0c230d23b37bb623714a23
• ghcr.io/openclarity/vmclarity-tools-base v0.6.0@sha256:dc9779be25bdbd3a8725e768764a223b8ba5fd906fc5afc67b417886086806d8

containerruntimediscovery/server/Dockerfile

• docker/dockerfile 1@sha256:fe40cf4e92cd0c467be2cfc30657a680ae2398318afd50b0c80585784c604f28
• tonistiigi/xx 1.4.0@sha256:0cd3f05c72d6c9b038eb135f91376ee1169ef3a330d34e418e65e2a5c2e9c0d4
• golang 1.23.0-bullseye@sha256:ecef8303ced05b7cd1addf3c8ea98974f9231d4c5a0c230d23b37bb623714a23
• alpine 3.20@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5

orchestrator/Dockerfile

• docker/dockerfile 1@sha256:fe40cf4e92cd0c467be2cfc30657a680ae2398318afd50b0c80585784c604f28
• tonistiigi/xx 1.4.0@sha256:0cd3f05c72d6c9b038eb135f91376ee1169ef3a330d34e418e65e2a5c2e9c0d4
• golang 1.23.0-bullseye@sha256:ecef8303ced05b7cd1addf3c8ea98974f9231d4c5a0c230d23b37bb623714a23
• alpine 3.20@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5

plugins/sdk-go/example/Dockerfile

• golang 1.23.0-alpine3.19@sha256:fe8f9c7d418d3ac91787f11c31071c4814b6da5f9aae55bc581a7aacc264c395
• alpine 3.20@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5

plugins/sdk-python/example/Dockerfile

• python 3.12-slim

plugins/sdk-python/example/Dockerfile.test

• ubuntu 24.04
• ubuntu 24.04

plugins/store/kics/Dockerfile

• golang 1.23.0-alpine3.19@sha256:fe8f9c7d418d3ac91787f11c31071c4814b6da5f9aae55bc581a7aacc264c395
• alpine 3.20@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5

ui/Dockerfile

• docker/dockerfile 1@sha256:fe40cf4e92cd0c467be2cfc30657a680ae2398318afd50b0c80585784c604f28
• node 20-slim
• nginxinc/nginx-unprivileged 1.27.1

uibackend/Dockerfile

• docker/dockerfile 1@sha256:fe40cf4e92cd0c467be2cfc30657a680ae2398318afd50b0c80585784c604f28
• tonistiigi/xx 1.4.0@sha256:0cd3f05c72d6c9b038eb135f91376ee1169ef3a330d34e418e65e2a5c2e9c0d4
• golang 1.23.0-bullseye@sha256:ecef8303ced05b7cd1addf3c8ea98974f9231d4c5a0c230d23b37bb623714a23
• alpine 3.20@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5

github-actions

.github/workflows/build-and-push-components.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• docker/bake-action v5.7.0@76cc8060bdff6d632a465001e4cf300684c5472c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• docker/setup-buildx-action v3.6.1@988b5a0280414f521da01fcc63a27aeeb4b104db
• actions/cache v4.0.2@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• docker/bake-action v5.7.0@76cc8060bdff6d632a465001e4cf300684c5472c

.github/workflows/build-and-upload-components.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• docker/bake-action v5.7.0@76cc8060bdff6d632a465001e4cf300684c5472c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• docker/setup-buildx-action v3.6.1@988b5a0280414f521da01fcc63a27aeeb4b104db
• actions/cache v4.0.2@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
• docker/bake-action v5.7.0@76cc8060bdff6d632a465001e4cf300684c5472c
• actions/upload-artifact v4.3.6@834a144ee995460fba8ed112a2fc961b36a5ec5a

.github/workflows/cache-cleanup.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332

.github/workflows/ci.yml

.github/workflows/dependencies.yml

• actions/create-github-app-token v1.10.3@31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4
• actions/setup-node v4.0.3@1e60f620b9541d16bece96c5465dc8ee9832be0b
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332

.github/workflows/image-cleanup.yml

• snok/container-retention-policy v3.0.0@4f22ef80902ad409ed55a99dc5133cc1250a0d03
• snok/container-retention-policy v3.0.0@4f22ef80902ad409ed55a99dc5133cc1250a0d03
• snok/container-retention-policy v3.0.0@4f22ef80902ad409ed55a99dc5133cc1250a0d03

.github/workflows/post-release.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/release.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• actions/cache v4.0.2@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
• actions/upload-artifact v4.3.6@834a144ee995460fba8ed112a2fc961b36a5ec5a
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• docker/login-action v3.3.0@9780b0c442fbb1117ed29e0efdff1e18412f7567
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• ncipollo/release-action v1.14.0@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5

.github/workflows/reusable-end-to-end-testing.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• actions/cache v4.0.2@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
• helm/kind-action v1.10.0@0025e74a8c7512023d06dc019c617aa3cf561fde
• azure/setup-helm v4.2.0@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16

.github/workflows/reusable-verification.yml

• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• actions/cache v4.0.2@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• scottbrenner/cfn-lint-action v2.4.4@c422b7baca772cd375807fea634a0a60008e8f52
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• actions/setup-go v5.0.2@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
• actions/cache v4.0.2@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
• actions/cache v4.0.2@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9

.github/workflows/semantic-pr.yml

• amannn/action-semantic-pull-request v5.5.3@0723387faaf9b38adef4775cd42cfd5155ed6017
• marocchino/sticky-pull-request-comment v2.9.0@331f8f5b4215f0445d3c07b4967662a32a2d3e31
• marocchino/sticky-pull-request-comment v2.9.0@331f8f5b4215f0445d3c07b4967662a32a2d3e31

.github/workflows/stale.yml

• openclarity/.github main

gomod

api/client/go.mod

• go 1.22.4
• github.com/oapi-codegen/oapi-codegen/v2 v2.3.1-0.20240819063527-fa048ac69eea@fa048ac69eea
• github.com/oapi-codegen/runtime v1.1.1

api/server/go.mod

• go 1.22.4
• github.com/CiscoM31/godata v1.0.10
• github.com/Portshift/go-utils v0.0.0-20220421083203-89265d8a6487@89265d8a6487
• github.com/aptible/supercronic v0.2.30
• github.com/evanphx/json-patch v5.9.0+incompatible
• github.com/getkin/kin-openapi v0.127.0
• github.com/go-viper/mapstructure/v2 v2.1.0
• github.com/google/go-cmp v0.6.0
• github.com/google/uuid v1.6.0
• github.com/labstack/echo/v4 v4.12.0
• github.com/oapi-codegen/echo-middleware v1.0.2
• github.com/oapi-codegen/oapi-codegen/v2 v2.3.1-0.20240819063527-fa048ac69eea@fa048ac69eea
• github.com/oapi-codegen/runtime v1.1.1
• github.com/onsi/gomega v1.33.1
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/cobra v1.8.1
• github.com/spf13/viper v1.19.0
• gorm.io/datatypes v1.2.1
• gorm.io/driver/postgres v1.5.7
• gorm.io/driver/sqlite v1.5.5
• gorm.io/gorm v1.25.10

api/types/go.mod

• go 1.22.4
• github.com/oapi-codegen/oapi-codegen/v2 v2.3.1-0.20240819063527-fa048ac69eea@fa048ac69eea
• github.com/oapi-codegen/runtime v1.1.1

cli/go.mod

• go 1.22.4
• github.com/CycloneDX/cyclonedx-go v0.8.0
• github.com/ghodss/yaml v1.0.0
• github.com/google/go-cmp v0.6.0
• github.com/google/uuid v1.6.0
• github.com/onsi/gomega v1.33.1
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/cobra v1.8.1
• github.com/spf13/viper v1.19.0
• github.com/mholt/archiver/v3 v3.5.1
• github.com/zregvart/helm/v3 v3.0.0-20240708093153-6040e8a3074b@6040e8a3074b

containerruntimediscovery/client/go.mod

• go 1.22.4

containerruntimediscovery/server/go.mod

• go 1.22.4
• github.com/containerd/containerd v1.7.19
• github.com/containerd/nerdctl v1.7.6
• github.com/containerd/platforms v0.2.1
• github.com/containers/image/v5 v5.31.1
• github.com/docker/docker v26.1.5+incompatible
• github.com/labstack/echo/v4 v4.12.0
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/cobra v1.8.1
• github.com/spf13/viper v1.19.0

containerruntimediscovery/types/go.mod

• go 1.22.4

core/go.mod

• go 1.22.4
• github.com/google/go-cmp v0.6.0
• github.com/sirupsen/logrus v1.9.3

e2e/go.mod

• go 1.22.4
• github.com/fbiville/markdown-table-formatter v0.3.0
• github.com/go-viper/mapstructure/v2 v2.1.0
• github.com/google/uuid v1.6.0
• github.com/onsi/ginkgo/v2 v2.20.1
• github.com/onsi/gomega v1.34.1
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/viper v1.19.0
• github.com/mholt/archiver/v3 v3.5.1
• github.com/zregvart/helm/v3 v3.0.0-20240708093153-6040e8a3074b@6040e8a3074b

e2e/testdata/go.mod

• go 1.22.4
• github.com/google/uuid v1.6.0

installation/go.mod

• go 1.22.4

orchestrator/go.mod

• go 1.22.4
• github.com/Portshift/go-utils v0.0.0-20220421083203-89265d8a6487@89265d8a6487
• github.com/anchore/syft v1.5.0
• github.com/aptible/supercronic v0.2.30
• github.com/go-viper/mapstructure/v2 v2.1.0
• github.com/google/go-cmp v0.6.0
• github.com/onsi/gomega v1.33.1
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/cobra v1.8.1
• github.com/spf13/viper v1.19.0
• gopkg.in/yaml.v3 v3.0.1
• gotest.tools/v3 v3.5.1
• k8s.io/apimachinery v0.30.2
• github.com/mholt/archiver/v3 v3.5.1
• github.com/zregvart/helm/v3 v3.0.0-20240708093153-6040e8a3074b@6040e8a3074b

plugins/runner/go.mod

• go 1.22.4
• github.com/docker/docker v26.1.5+incompatible
• github.com/docker/go-connections v0.5.0
• github.com/google/uuid v1.6.0
• github.com/hashicorp/go-multierror v1.1.1
• github.com/oapi-codegen/oapi-codegen/v2 v2.3.1-0.20240819063527-fa048ac69eea@fa048ac69eea

plugins/sdk-go/example/go.mod

• go 1.22.4

plugins/sdk-go/go.mod

• go 1.22.4
• github.com/getkin/kin-openapi v0.127.0
• github.com/go-playground/validator/v10 v10.22.0
• github.com/labstack/echo/v4 v4.12.0
• github.com/oapi-codegen/oapi-codegen/v2 v2.3.1-0.20240819063527-fa048ac69eea@fa048ac69eea

plugins/store/kics/go.mod

• go 1.22.4
• github.com/Checkmarx/kics/v2 v2.1.1
• github.com/docker/docker v24.0.9+incompatible

provider/go.mod

• go 1.22.4
• cloud.google.com/go/compute v1.27.3
• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.13.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.7.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v5 v5.2.0
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.4.0
• github.com/Masterminds/sprig/v3 v3.2.3
• github.com/aws/aws-sdk-go-v2 v1.30.3
• github.com/aws/aws-sdk-go-v2/config v1.27.27
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.173.0
• github.com/aws/aws-sdk-go-v2/service/pricing v1.30.3
• github.com/aws/smithy-go v1.20.3
• github.com/docker/docker v26.1.5+incompatible
• github.com/go-viper/mapstructure/v2 v2.1.0
• github.com/google/go-cmp v0.6.0
• github.com/mitchellh/mapstructure v1.5.0
• github.com/onsi/gomega v1.33.1
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/viper v1.19.0
• golang.org/x/sync v0.7.0
• google.golang.org/api v0.189.0
• google.golang.org/grpc v1.65.0
• google.golang.org/protobuf v1.34.2
• gopkg.in/yaml.v3 v3.0.1
• gotest.tools/v3 v3.5.1
• k8s.io/api v0.30.2
• k8s.io/apimachinery v0.30.2
• k8s.io/client-go v0.30.2
• github.com/mholt/archiver/v3 v3.5.1
• github.com/zregvart/helm/v3 v3.0.0-20240708093153-6040e8a3074b@6040e8a3074b

scanner/go.mod

• go 1.22.4
• github.com/CycloneDX/cyclonedx-go v0.8.0
• github.com/CycloneDX/cyclonedx-gomod v1.7.0
• github.com/Portshift/dockle v0.3.2-0.20240611055957-53ff8586f9c7@53ff8586f9c7
• github.com/anchore/clio v0.0.0-20240705045624-ac88e09ad9d0@ac88e09ad9d0
• github.com/anchore/grype v0.78.0
• github.com/anchore/stereoscope v0.0.3-0.20240624202600-753b5576fe42@753b5576fe42
• github.com/anchore/syft v1.5.0
• github.com/aquasecurity/trivy v0.51.4
• github.com/aquasecurity/trivy-db v0.0.0-20240602051612-79d0fbd1e246@79d0fbd1e246
• github.com/cenkalti/backoff v2.2.1+incompatible
• github.com/containers/image/v5 v5.31.1
• github.com/go-openapi/runtime v0.28.0
• github.com/go-openapi/strfmt v0.23.0
• github.com/google/go-cmp v0.6.0
• github.com/google/go-containerregistry v0.20.1
• github.com/google/uuid v1.6.0
• github.com/jinzhu/copier v0.4.0
• github.com/onsi/gomega v1.33.1
• github.com/openclarity/grype-server/api v0.0.0-20240808094111-65a244e79a8f@65a244e79a8f
• github.com/openclarity/yara-rule-server v0.3.0
• github.com/package-url/packageurl-go v0.1.3
• github.com/rs/zerolog v1.33.0
• github.com/samber/slog-logrus/v2 v2.5.0
• github.com/sirupsen/logrus v1.9.3
• github.com/sourcegraph/conc v0.3.0
• github.com/tdewolff/parse/v2 v2.7.15
• github.com/vulsio/go-exploitdb v0.4.6
• golang.org/x/crypto v0.25.0
• golang.org/x/sync v0.7.0
• gopkg.in/yaml.v3 v3.0.1
• gotest.tools/v3 v3.5.1
• k8s.io/client-go v0.30.2
• www.velocidex.com/golang/regparser v0.0.0-20240404115756-2169ac0e3c09@2169ac0e3c09
• github.com/mholt/archiver/v3 v3.5.1
• github.com/zregvart/helm/v3 v3.0.0-20240708093153-6040e8a3074b@6040e8a3074b

testenv/go.mod

• go 1.22.4
• cloud.google.com/go/compute v1.27.3
• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.13.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2 v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.7.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v5 v5.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.2.0
• github.com/aws/aws-sdk-go-v2 v1.30.3
• github.com/aws/aws-sdk-go-v2/config v1.27.27
• github.com/aws/aws-sdk-go-v2/service/cloudformation v1.53.3
• github.com/aws/aws-sdk-go-v2/service/ec2 v1.173.0
• github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2
• github.com/compose-spec/compose-go/v2 v2.1.2
• github.com/distribution/reference v0.6.0
• github.com/docker/cli v26.1.4+incompatible
• github.com/docker/compose/v2 v2.27.1
• github.com/docker/docker v26.1.5+incompatible
• github.com/ghodss/yaml v1.0.0
• github.com/go-viper/mapstructure/v2 v2.1.0
• github.com/onsi/gomega v1.33.1
• github.com/opencontainers/go-digest v1.0.0
• github.com/pkg/errors v0.9.1
• github.com/sirupsen/logrus v1.9.3
• golang.org/x/crypto v0.25.0
• google.golang.org/api v0.189.0
• helm.sh/helm/v3 v3.15.2
• k8s.io/api v0.30.2
• k8s.io/apimachinery v0.30.2
• k8s.io/cli-runtime v0.30.2
• k8s.io/client-go v0.30.2
• sigs.k8s.io/kind v0.23.0
• github.com/zregvart/helm/v3 v3.0.0-20240708093153-6040e8a3074b@6040e8a3074b

uibackend/client/go.mod

• go 1.22.4
• github.com/oapi-codegen/oapi-codegen/v2 v2.3.1-0.20240819063527-fa048ac69eea@fa048ac69eea
• github.com/oapi-codegen/runtime v1.1.1

uibackend/server/go.mod

• go 1.22.4
• github.com/Portshift/go-utils v0.0.0-20220421083203-89265d8a6487@89265d8a6487
• github.com/getkin/kin-openapi v0.127.0
• github.com/go-viper/mapstructure/v2 v2.1.0
• github.com/google/go-cmp v0.6.0
• github.com/labstack/echo/v4 v4.12.0
• github.com/oapi-codegen/echo-middleware v1.0.2
• github.com/oapi-codegen/oapi-codegen/v2 v2.3.1-0.20240819063527-fa048ac69eea@fa048ac69eea
• github.com/oapi-codegen/runtime v1.1.1
• github.com/onsi/gomega v1.33.1
• github.com/sirupsen/logrus v1.9.3
• github.com/spf13/cobra v1.8.1
• github.com/spf13/viper v1.19.0
• gotest.tools/v3 v3.5.1

uibackend/types/go.mod

• go 1.22.4
• github.com/oapi-codegen/oapi-codegen/v2 v2.3.0

utils/go.mod

• go 1.22.4
• github.com/anchore/stereoscope v0.0.2
• github.com/go-viper/mapstructure/v2 v2.1.0
• github.com/moby/sys/mountinfo v0.7.1
• github.com/onsi/gomega v1.33.1
• github.com/docker/docker v24.0.9+incompatible

workflow/go.mod

• go 1.22.4
• github.com/heimdalr/dag v1.4.0
• github.com/onsi/gomega v1.33.1

helm-values

installation/kubernetes/helm/openclarity/values.yaml

• docker.io/nginxinc/nginx-unprivileged 1.27.1
• docker.io/bitnami/postgresql 16.3.0-debian-12-r23
• ghcr.io/openclarity/exploit-db-server v0.3.0
• docker.io/aquasec/trivy 0.54.1
• ghcr.io/openclarity/grype-server v0.7.4
• ghcr.io/openclarity/freshclam-mirror v0.3.1
• docker.io/swaggerapi/swagger-ui v5.17.14
• ghcr.io/openclarity/yara-rule-server v0.3.0

helmv3

installation/kubernetes/helm/openclarity/Chart.yaml

• postgresql 15.5.20

pip_setup

plugins/sdk-python/setup.py

• Flask >=3.0.3
• python_dateutil >=2.6.0

regex

makefile.d/20-tools.mk

• github.com/goph/licensei 0.9.0
• github.com/rhysd/actionlint 1.7.1
• azure-cli 2.55.0
• Azure/bicep 0.29.47
• cfn-lint 0.83.4
• github.com/golangci/golangci-lint 1.59.1
• mikefarah/yq 4.44.3
• helm/helm 3.15.3
• norwoodj/helm-docs 1.14.2
• orhun/git-cliff 2.4.0
• crate-ci/typos 1.23.6
• renovatebot/renovate 38.55.4

---

• Check this box to trigger a request for Renovate to run again on this repository

[ramizpolic]

Closing this as it will be replaced by self-running Renovate