{"id":3631224,"name":"github.com/containerd/imgcrypt","ecosystem":"go","description":"","homepage":"https://github.com/containerd/imgcrypt","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/containerd/imgcrypt","keywords_array":[],"namespace":"github.com/containerd","versions_count":16,"first_release_published_at":"2020-01-06T14:20:00.000Z","latest_release_published_at":"2024-04-19T20:03:22.000Z","latest_release_number":"v1.1.11","last_synced_at":"2026-10-12T09:08:41.050Z","created_at":"2022-04-11T08:27:31.135Z","updated_at":"2026-10-12T09:08:41.051Z","registry_url":"https://pkg.go.dev/github.com/containerd/imgcrypt","install_command":"go get github.com/containerd/imgcrypt","documentation_url":"https://pkg.go.dev/github.com/containerd/imgcrypt#section-documentation","metadata":null,"repo_metadata":{"id":35425200,"uuid":"217386639","full_name":"containerd/imgcrypt","owner":"containerd","description":"OCI Image Encryption Package","archived":false,"fork":false,"pushed_at":"2026-09-25T19:52:17.000Z","size":11321,"stargazers_count":437,"open_issues_count":3,"forks_count":51,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-10-02T00:44:57.230Z","etag":null,"topics":["containers","encryption","gpg","oci","oci-image"],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/containerd.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS","copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2019-10-24T20:10:03.000Z","updated_at":"2026-09-25T19:51:03.000Z","dependencies_parsed_at":"2026-01-08T15:11:21.006Z","dependency_job_id":null,"html_url":"https://github.com/containerd/imgcrypt","commit_stats":null,"previous_names":[],"tags_count":20,"template":false,"template_full_name":null,"purl":"pkg:github/containerd/imgcrypt","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/containerd","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/sbom","scorecard":{"id":303296,"data":{"date":"2025-08-11","repo":{"name":"github.com/containerd/imgcrypt","commit":"d9809a71afd5b14b3d76a04de6fa88eec2eb6283"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":1,"reason":"2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":4,"reason":"Found 4/9 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:29","Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/codeql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/containerd/imgcrypt/codeql.yml/main?enable=pin","Info:   0 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/containerd/.github/SECURITY.md:1","Info: Found linked content: github.com/containerd/.github/SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: github.com/containerd/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":8,"reason":"2 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3701 / GHSA-cxfp-7pvr-95ff","Warn: Project is vulnerable to: GO-2025-3485 / GHSA-c6gw-w398-hv78"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T21:19:22.626Z","repository_id":35425200,"created_at":"2025-08-17T21:19:22.626Z","updated_at":"2025-08-17T21:19:22.626Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38049203,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-05T02:00:06.766Z","response_time":83,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"containerd","name":"containerd","uuid":"14037953","kind":"organization","description":"","email":null,"website":"containerd.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/14037953?v=4","repositories_count":36,"last_synced_at":"2024-04-14T06:47:07.952Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/containerd","funding_links":[],"total_stars":30901,"followers":727,"following":0,"created_at":"2022-11-07T08:00:57.161Z","updated_at":"2024-04-14T06:47:13.945Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/containerd","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/containerd/repositories"},"tags":[{"name":"v2.0.2","sha":"6892f4df2405cd15acbefd1dca970f53ba38bfda","kind":"tag","published_at":"2025-11-06T13:26:10.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v2.0.2","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"c377ec98ff79ec9205eabf555ebd2ea784738c6c","kind":"tag","published_at":"2025-03-19T12:18:03.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v2.0.1","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"1e301ef2620964bedfa68ee4b841ff80f4887736","kind":"tag","published_at":"2024-12-16T17:29:17.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v2.0.0","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v2.0.0/manifests"},{"name":"v2.0.0-rc.1","sha":"ed83e83c1052e779f45a8f09b92dcd617032fb87","kind":"tag","published_at":"2024-10-28T15:56:24.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v2.0.0-rc.1","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v2.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v2.0.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v2.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v2.0.0-rc.1/manifests"},{"name":"v1.2.0-rc1","sha":"225e38095fa3ac5d8f22a8498f7492cb5d62d5c7","kind":"tag","published_at":"2024-07-01T17:11:51.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.2.0-rc1","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.2.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.2.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.2.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.2.0-rc1/manifests"},{"name":"v1.1.11","sha":"619fd33080b087702c72e93451a698c381d522d0","kind":"commit","published_at":"2024-04-19T20:03:22.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.11","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.11/manifests"},{"name":"v1.1.10","sha":"e093236d13aa289903f0be5e9030fddf6eab6292","kind":"tag","published_at":"2024-03-13T15:16:54.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.10","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.10/manifests"},{"name":"v1.1.9","sha":"90513b079771363133611a91de350ea932e09b26","kind":"tag","published_at":"2023-10-31T14:27:49.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.9","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.9/manifests"},{"name":"v1.1.8","sha":"061ead6edbef40cca81adb6230afba10413f7db6","kind":"tag","published_at":"2023-08-15T16:35:00.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.8","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.8/manifests"},{"name":"v1.1.7","sha":"01a05dffff35aadeb0a3008016ed745e7ff6beda","kind":"tag","published_at":"2022-10-14T19:44:32.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.7","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.7/manifests"},{"name":"v1.1.6","sha":"23f077229f2cdee91ba70d49684751187a5775f5","kind":"tag","published_at":"2022-06-08T00:25:36.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.6","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.6/manifests"},{"name":"v1.1.5","sha":"4f79bd6774334325ef7ed534721a7475ce9c5d4c","kind":"commit","published_at":"2022-05-18T13:27:53.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.5","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.5/manifests"},{"name":"v1.1.4","sha":"4b7120856cc14eb38f6e80438f69e53d1f45e8fb","kind":"tag","published_at":"2022-03-25T11:23:40.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.4","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.4/manifests"},{"name":"v1.1.3","sha":"65d749cef36547473d1c1b0b67ed8a4b9e3d13d4","kind":"tag","published_at":"2021-12-14T20:23:46.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.3","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.3/manifests"},{"name":"v1.1.2","sha":"0ae2c06b8dade2bd76a5c9681f60706330ed653a","kind":"tag","published_at":"2021-10-29T14:13:41.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.2","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"f385f6ca972ac8169ce321830911d0253cb0b194","kind":"tag","published_at":"2021-04-13T20:18:06.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.1","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"07b581258b8d78ca3baef5648f1eff7b4a70e9e7","kind":"tag","published_at":"2021-03-08T16:26:45.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.1.0","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.1.0/manifests"},{"name":"v1.0.3","sha":"c4d33d1d22465460abffeeb080f284b3d8140dd4","kind":"commit","published_at":"2020-07-10T14:23:03.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.0.3","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.0.3/manifests"},{"name":"v1.0.1","sha":"9e761ccd6069fb707ec9493435f31475b5524b38","kind":"commit","published_at":"2020-02-24T20:25:09.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.0.1","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"99334633d4657af3f32670947eb1008250e564d9","kind":"commit","published_at":"2020-01-06T14:20:00.000Z","download_url":"https://codeload.github.com/containerd/imgcrypt/tar.gz/v1.0.0","html_url":"https://github.com/containerd/imgcrypt/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/containerd/imgcrypt@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-10-10T18:53:55.239Z","dependent_packages_count":155,"downloads":null,"downloads_period":null,"dependent_repos_count":12165,"rankings":{"downloads":null,"dependent_repos_count":0.06909373093697739,"dependent_packages_count":0.3838540607609855,"stargazers_count":3.2682029446595635,"forks_count":3.888535157343709,"docker_downloads_count":0.10260315299800396,"average":1.5424578093398478},"purl":"pkg:golang/github.com/containerd/imgcrypt","advisories":[{"uuid":"GSA_kwCzR0hTQS04djk5LTQ4bTktYzhwbc02Hw","url":"https://github.com/advisories/GHSA-8v99-48m9-c8pm","title":"Incorrect Authorization in imgcrypt","description":"Imgcrypt implements a function `CheckAuthorization()` that is supposed to check whether a user is authorized to access an encrypted image given the keys that the user has provided on the command line that would enable decryption of the image. The check is to prevent that a user can start a container from an image that has previously been decrypted by another user on the same system and therefore a decrypted version of the image layers may be already available in the cache locally.\n\nThe failure occurs when an image with a ManifestList is used and the architecture of the local host is not the first one in the ManifestList. In the version prior to the fix, only the first architecture in the list was tested, which may not have its layers available locally (were not pulled) since it cannot be run on the host architecture. Therefore, the verdict on unavailable layers was that the image could be run anticipating that image run failure would occur later due to the layers not being available. However, this verdict to allow the image to run lead to other architectures in the ManifestList be able to run an image without providing keys if that image had previously been decrypted. The fixed version now skips over irrelevant architectures and tests the Manifest of the local architecture, if available.\n\nKnown projects that use the `CheckAuthorization()` of imgcrypt is for example the ctr-enc client tool provided by imgcrypt. In this implementation, the call to `CheckAuthorization()` is used on the client side and could therefore also be easily circumvented by a modified client tool not calling this function.\n\nIn relation to the vulnerability in ctr-enc, affected environments would have to allow different users to invoke ctr-enc indirectly using some sort of management stack that gives user indirect access to ctr-enc.\n\nThe patch has been applied to imgcrypt v1.1.4. Workarounds may include usage of different namespaces for each remote user.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-03-28T19:33:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://github.com/containerd/imgcrypt/security/advisories/GHSA-8v99-48m9-c8pm","https://nvd.nist.gov/vuln/detail/CVE-2022-24778","https://github.com/containerd/imgcrypt/issues/69","https://github.com/containerd/imgcrypt/commit/6fdd9818a4d8142107b7ecd767d839c9707700d9","https://github.com/containerd/imgcrypt/releases/tag/v1.1.4","https://pkg.go.dev/vuln/GO-2021-0412","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SJUNSC7YZLA745EMKWK2GKEV57GE52K","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAHAAOOA3KZJC2I5WHCR3XVBJBNWTWUE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFTJR5CR5EOYDVOSBZEMLBHLJRTPJPUA","https://github.com/advisories/GHSA-8v99-48m9-c8pm"],"source_kind":"github","identifiers":["GHSA-8v99-48m9-c8pm","CVE-2022-24778"],"repository_url":"https://github.com/containerd/imgcrypt","blast_radius":0.0,"created_at":"2022-12-21T16:12:31.781Z","updated_at":"2026-10-03T14:08:40.711Z","epss_percentage":0.02718,"epss_percentile":0.8551,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04djk5LTQ4bTktYzhwbc02Hw","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04djk5LTQ4bTktYzhwbc02Hw","packages":[{"ecosystem":"go","package_name":"github.com/containerd/imgcrypt","versions":[{"first_patched_version":"1.1.4","vulnerable_version_range":"\u003c 1.1.4"}],"purl":"pkg:go/github.com%2Fcontainerd%2Fimgcrypt"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04djk5LTQ4bTktYzhwbc02Hw/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/containerd/imgcrypt","docker_dependents_count":1695,"docker_downloads_count":2098640794,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/containerd/imgcrypt","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/containerd/imgcrypt/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-05T22:33:34.994Z","issues_count":29,"pull_requests_count":188,"avg_time_to_close_issue":7637241.740740741,"avg_time_to_close_pull_request":1648069.384180791,"issues_closed_count":27,"pull_requests_closed_count":177,"pull_request_authors_count":22,"issue_authors_count":26,"avg_comments_per_issue":6.241379310344827,"avg_comments_per_pull_request":0.9946808510638298,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":49,"past_year_issues_count":1,"past_year_pull_requests_count":12,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":64943.42857142857,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":7,"past_year_pull_request_authors_count":4,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":40.0,"past_year_avg_comments_per_pull_request":0.25,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":8,"past_year_merged_pull_requests_count":6,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/containerd%2Fimgcrypt/issues","maintainers":[{"login":"AkihiroSuda","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AkihiroSuda"},{"login":"lumjjb","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lumjjb"},{"login":"dmcgowan","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dmcgowan"},{"login":"thaJeztah","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/thaJeztah"},{"login":"kzys","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kzys"},{"login":"mikebrow","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mikebrow"},{"login":"samuelkarp","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/samuelkarp"},{"login":"estesp","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/estesp"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcontainerd%2Fimgcrypt/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcontainerd%2Fimgcrypt/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcontainerd%2Fimgcrypt/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcontainerd%2Fimgcrypt/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcontainerd%2Fimgcrypt/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcontainerd%2Fimgcrypt/codemeta","maintainers":[]}