ruby

Sep 8, 2026 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jul 20, 2026 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jul 17, 2026 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Mar 26, 2026 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Mar 24, 2026 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Mar 2, 2026 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Feb 5, 2026 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Changes in this version

+ const PURLType

+ func GeneratePURL(ctx context.Context, ir *claircore.IndexRecord) (packageurl.PackageURL, error)

+ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.IndexRecord, error)

Dec 5, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Dec 3, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Dec 1, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Oct 20, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Oct 1, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Sep 29, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Sep 19, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Sep 18, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Sep 16, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jun 12, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jun 6, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Apr 28, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Apr 18, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Feb 11, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jan 6, 2025 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Nov 8, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Oct 4, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Sep 16, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Sep 6, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Aug 21, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

May 13, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Apr 25, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Apr 2, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Feb 26, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Feb 22, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Feb 19, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Feb 16, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Feb 1, 2024 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Changes in this version

type Scanner

+ func (Scanner) DefaultRepository(ctx context.Context) *claircore.Repository

+ type Segment interface

+ Compare func(other Segment) int

+ type Version struct

+ func NewVersion(version string) (Version, error)

+ func (v Version) Compare(other Version) int

Oct 12, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Oct 3, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Oct 3, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Sep 28, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Aug 14, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Aug 8, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Aug 7, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jul 26, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jul 24, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jul 21, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jul 20, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jul 11, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jun 23, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Jun 9, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Changes in this version

+ type Matcher struct

+ func (*Matcher) Filter(record *claircore.IndexRecord) bool

+ func (*Matcher) Name() string

+ func (*Matcher) Query() []driver.MatchConstraint

+ func (*Matcher) Vulnerable(ctx context.Context, record *claircore.IndexRecord, ...) (bool, error)

Jun 6, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

May 25, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

May 25, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

May 22, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

May 22, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

May 15, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Apr 14, 2023 GO-2026-5939

  GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Changes in this version

+ var Repository = claircore.Repository

+ func NewCoalescer(_ context.Context) (indexer.Coalescer, error)

+ func NewEcosystem(_ context.Context) *indexer.Ecosystem

+ type RepoScanner struct

+ func (*RepoScanner) Kind() string

+ func (*RepoScanner) Name() string

+ func (*RepoScanner) Version() string

+ func (rs *RepoScanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircore.Repository, error)

+ type Scanner struct

+ func (*Scanner) Kind() string

+ func (*Scanner) Name() string

+ func (*Scanner) Version() string

+ func (ps *Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircore.Package, error)