cdrocker/saltstack repository overview

user: nonroot
log_file: /tmp/salt-master.log
key_logfile: /tmp/salt-key.log

fileserver_backend:
  - roots

file_roots:
  base:
    - /etc/salt/fileroot

cosign verify cdrocker/saltstack:v3007.10 --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp https://github.com/

grype cdrocker/saltstack:v3007.10
 ✔ Parsed image                                                                                                         sha256:fde9235335f5bc13896b1dfdab9ef3410ebeed1ff5db1e2a4b52fe88e325c7cd
 ✔ Cataloged contents                                                                                                          7cd8683a48bbb45dcc8d12745ad5117347952ad5c71f4acb2a0d2e9e0a6ff71c
   ├── ✔ Packages                        [65 packages]
   ├── ✔ Executables                     [221 executables]
   ├── ✔ File metadata                   [2,873 locations]
   └── ✔ File digests                    [2,873 files]
 ✔ Scanned for vulnerabilities     [4 vulnerability matches]
   ├── by severity: 1 critical, 0 high, 2 medium, 1 low, 0 negligible
NAME         INSTALLED   TYPE  VULNERABILITY   SEVERITY  EPSS           RISK
python-3.10  3.10.19-r3  apk   CVE-2025-12084  Medium    0.2% (37th)    < 0.1
python-3.10  3.10.19-r3  apk   CVE-2025-13836  Critical  < 0.1% (25th)  < 0.1
busybox      1.37.0-r50  apk   CVE-2025-60876  Medium    < 0.1% (15th)  < 0.1
python-3.10  3.10.19-r3  apk   CVE-2025-13837  Low       < 0.1% (4th)   < 0.1