@scalar/api-reference
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-YU9KKgvZ.js | AI (source-diff): Vite-bundled minified dist chunk with build banner; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-WJ4Gcv8N.js | AI (source-diff): Vite-bundled minified dist chunk with build banner; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-B-Nhpn0q.js | AI (source-diff): Vite-bundled minified dist chunk with build banner; not obfuscation. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-BqFs9NIb.js | AI (source-diff): Bundled vendor chunk; net+exec patterns are library code, no hostile target. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-7kt1IXrE.js | AI (source-diff): Vendor bundle for a browser API-reference component; net/exec are library primitives, no hostile target. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-BkjPSVNK.js | AI (source-diff): Vite/Rollup minified browser bundle with Scalar banner; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-CI1RYR0j.js | AI (source-diff): Minified bundled browser chunk; benign build output. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-CnSl7YW1.js | AI (source-diff): Minified bundled Vue component chunk; benign build output. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-BLBi4S4R.js | AI (source-diff): Vite-bundled dist chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-D7J_MHKY.js | AI (source-diff): Vite-bundled dist chunk with Scalar banner; minified not obfuscated. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-DHN5fsxL.js | AI (source-diff): Bundled vendor chunk; net+exec is browser-runtime library code, no hostile destination. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-Fb0snAee.js | AI (source-diff): Vite-bundled dist chunk; minified build output. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-BPQqqkn-.js | AI (source-diff): Bundled vendor chunk; net+exec are library primitives, no hostile target. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-CysYmeeN.js | AI (source-diff): Vite-bundled dist chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-wI0tG53V.js | AI (source-diff): Vite-bundled dist chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-C3QiXv0S.js | AI (source-diff): Vite-bundled dist chunk with Scalar banner; minified not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-B4LeCbAi.js | AI (source-diff): Minified Vite bundle; normal ESM imports, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-D4DCmV5y.js | AI (source-diff): Minified Vite bundle with Scalar banner; long lines are build output, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-BNhbieDE.js | AI (source-diff): Vendor browser bundle; net+exec patterns inherent to bundled deps, no hostile target. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-C5aaO8tA.js | AI (source-diff): Minified Vue component bundle; build output. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-Dp5Q6nDX.js | AI (source-diff): Bundled vendor chunk of a browser API-reference UI; network+eval is normal Vue runtime, no hostile destination. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-CPqxdcxM.js | AI (source-diff): Minified vite bundle output, not obfuscation; per-file path won't recur but pattern is benign build artifact. | ai | |
| source-diff | obfuscated-file:dist/src-DJwsRvMU.js | AI (source-diff): Bundled Vite build output, readable ESM imports; not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-DfHAfVG5.js | AI (source-diff): Bundled minified Vue component chunk. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-uEJhFXkB.js | AI (source-diff): Bundled minified dist chunk, build output. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-VSnkfbyL.js | AI (source-diff): Bundled minified dist chunk with Scalar banner, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-C5HmjoOQ.js | AI (source-diff): Minified Vite vendor bundle; long lines are build output, no malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-BhUn0w1j.js | AI (source-diff): Vite-bundled dist chunk with Scalar banner; minified build output, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-BeJNu9KM.js | AI (source-diff): Bundled vendor chunk; net+exec patterns are inherent to browser bundle, no hostile destination. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-BUzf4Z_k.js | AI (source-diff): Vite-bundled dist chunk; minified build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-CZI71Aau.js | AI (source-diff): Vite-bundled dist chunk; minified build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-B2flFlrc.js | AI (source-diff): Bundled dist chunk; minified build output. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-DX-rWLia.js | AI (source-diff): Vite-bundled dist chunk, long lines are minification not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-DuE2oAzR.js | AI (source-diff): Bundled dist chunk; minified build output. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-DPVN2O_H.js | AI (source-diff): Bundled vendor chunk; net+exec patterns are Vue runtime build output, no hostile target. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-Cg0WEkPQ.js | AI (source-diff): Minified Vite bundle chunk; build output. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-DfF1NNVy.js | AI (source-diff): Bundled Vue vendor chunk; net+exec is standard browser runtime, no hostile target. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-Bd03__M5.js | AI (source-diff): Minified Vite bundle chunk with Scalar banner; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-DXAlZ4Y8.js | AI (source-diff): Minified Vite bundle chunk; build output. | ai | |
| source-diff | obfuscated-file:dist/src-DqcYVBWI.js | AI (source-diff): Vite/rollup bundle output with readable ESM imports, not obfuscation; stable for this build tool. | ai | |
| source-diff | obfuscated-file:dist/components/GettingStarted.vue.script.js | AI (source-diff): Vite/Vue bundled component output, not obfuscation; readable imports and first-party fetch target. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-c6CQmaLr.js | AI (source-diff): Vite-bundled minified chunk with Scalar banner, not obfuscation. | ai | |
| dependencies | unvetted-dep:@scalar/client-app | AI (dependencies): First-party sibling package in the same monorepo. | ai | |
| phantom-deps | phantom-dep:unhead | AI (phantom-deps): Used in config, not a real risk. | ai | |
| phantom-deps | phantom-dep:unified | AI (phantom-deps): Used via config files, not direct import; benign. | ai | |
| phantom-deps | phantom-dep:postcss-nested | AI (phantom-deps): Used via PostCSS config, not direct import; stable false positive. | ai | |
| dependencies | unvetted-dep:@scalar/api-client-modal | AI (dependencies): First-party @scalar sibling package within same monorepo. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-BvqLUPs5.js | AI (source-diff): Vite-bundled dist chunk with official banner; minified not obfuscated. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-BlFFskFr.js | AI (source-diff): Bundled vendor chunk; net+exec are inherent to browser bundle, no hostile target. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-CNs5mxby.js | AI (source-diff): Vite-bundled dist chunk with official banner; minified not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-D_L-rtQC.js | AI (source-diff): Vite-bundled dist chunk with official banner; minified not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-DQLVQL1H.js | AI (source-diff): Minified bundle chunk, official banner; build output. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-CMNc6l_z.js | AI (source-diff): Standard vendor bundle for browser build; dual-use in minified output, no hostile destination. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-Cb7P6-e4.js | AI (source-diff): Minified Vue component bundle chunk; build output. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-DeQ6jlD2.js | AI (source-diff): Vite/Rollup minified bundle chunk with official Scalar banner; build output not obfuscation. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-wW8jg8wN.js | AI (source-diff): Vendor bundle from Vite build; network+exec patterns are from bundled dependencies (Vue, etc.). | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-BZzcBkVp.js | AI (source-diff): Standard Vite-minified browser bundle chunk; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-CesFQ_Ax.js | AI (source-diff): Standard Vite-minified browser bundle chunk; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-C14zmVNI.js | AI (source-diff): Standard Vite-minified browser bundle chunk; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:flatted | AI (phantom-deps): Declared dep used transitively or in config; stable pattern for this package. | ai | |
| provenance | publisher-changed | AI (provenance): scalar_geoff is an established Scalar org publisher with 446 approved packages. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-Dv0uBVU9.js | AI (source-diff): Vite-minified browser bundle chunk; standard for this package's dist output. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-Cx_C-51y.js | AI (source-diff): Vendor bundle from Vite build; network+exec patterns are from bundled dependencies. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-ZmlutrTU.js | AI (source-diff): Vite-minified browser bundle chunk; standard for this package's dist output. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-DHI6k89v.js | AI (source-diff): Vite-minified browser bundle chunk; standard for this package's dist output. | ai | |
| source-diff | encoded-string-file:dist/browser/standalone.js | AI (source-diff): Bundled standalone build with CodeMirror bidi char-class tables; stable minified output pattern. | ai | |
| source-diff | net-exec-file:dist/browser/chunks/vendor-nugWm4eq.js | AI (source-diff): Bundled vendor chunk for browser dist; network+exec pattern is normal for UI framework bundles. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/ScalarTextInput.vue-XkIzhvc0.js | AI (source-diff): Standard Vite-minified browser chunk with Scalar banner; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/modal-Bp9V4D2s.js | AI (source-diff): Standard Vite-minified browser chunk with Scalar banner; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-BXB1nZKJ.js | AI (source-diff): Standard Vite-minified browser chunk with Scalar banner; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@scalar/openapi-upgrader | AI (phantom-deps): Same-org scoped dependency; declared and re-exported, stable pattern. | ai | |
| phantom-deps | phantom-dep:@scalar/object-utils | AI (phantom-deps): Same-org scoped dependency; declared and re-exported, stable pattern. | ai | |
| phantom-deps | phantom-dep:@scalar/json-magic | AI (phantom-deps): Same-org scoped dependency; declared and re-exported, stable pattern. | ai | |
| phantom-deps | phantom-dep:@floating-ui/vue | AI (phantom-deps): Declared dependency; referenced in config, stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:type-fest | AI (phantom-deps): Declared dependency; referenced in config, stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:js-base64 | AI (phantom-deps): Declared dependency; referenced in config, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/browser-67K6wmG9.js | AI (source-diff): Vite-bundled browser standalone chunk with standard minification; stable pattern for this package. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New standalone ESM build target adds expected browser bundle chunks. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-DIIVMX31.js | AI (source-diff): Vite-bundled browser standalone chunk with standard minification; stable pattern for this package. | ai | |
| dependencies | unvetted-dep:@scalar/themes | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/workspace-store | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/use-toasts | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/components | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/api-client | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/agent-chat | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/use-hooks | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/oas-utils | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/sidebar | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/icons | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai |
Versions (showing 100 of 395)
| Version | Deps | Published |
|---|---|---|
| 1.43.2 | 30 / 21 | |
| 1.43.1 | 30 / 21 | |
| 1.43.0 | 30 / 21 | |
| 1.42.0 | 30 / 21 | |
| 1.41.1 | 30 / 21 | |
| 1.41.0 | 30 / 21 | |
| 1.40.9 | 30 / 21 | |
| 1.40.8 | 30 / 21 | |
| 1.40.5 | 30 / 21 | |
| 1.40.4 | 30 / 21 | |
| 1.40.3 | 30 / 21 | |
| 1.40.2 | 30 / 21 | |
| 1.40.1 | 30 / 21 | |
| 1.40.0 | 30 / 21 | |
| 1.39.3 | 30 / 21 | |
| 1.39.2 | 30 / 21 | |
| 1.39.1 | 30 / 21 | |
| 1.39.0 | 30 / 21 | |
| 1.36.2 | 30 / 21 | |
| 1.36.1 | 30 / 21 | |
| 1.36.0 | 30 / 21 | |
| 1.35.7 | 30 / 21 | |
| 1.35.6 | 29 / 21 | |
| 1.35.5 | 29 / 21 | |
| 1.35.4 | 29 / 21 | |
| 1.35.3 | 29 / 21 | |
| 1.35.2 | 29 / 21 | |
| 1.35.1 | 29 / 21 | |
| 1.35.0 | 29 / 21 | |
| 1.34.6 | 27 / 21 | |
| 1.34.5 | 27 / 21 | |
| 1.34.4 | 27 / 21 | |
| 1.34.2 | 26 / 21 | |
| 1.34.1 | 26 / 21 | |
| 1.34.0 | 26 / 21 | |
| 1.33.0 | 26 / 17 | |
| 1.32.10 | 26 / 17 | |
| 1.32.9 | 26 / 17 | |
| 1.32.8 | 26 / 17 | |
| 1.32.7 | 26 / 17 | |
| 1.32.6 | 26 / 17 | |
| 1.32.5 | 25 / 17 | |
| 1.32.4 | 25 / 17 | |
| 1.32.1 | 25 / 17 | |
| 1.32.0 | 25 / 17 | |
| 1.31.18 | 25 / 17 | |
| 1.31.17 | 25 / 17 | |
| 1.31.15 | 25 / 17 | |
| 1.31.14 | 25 / 17 | |
| 1.31.12 | 25 / 17 | |
| 1.31.11 | 25 / 17 | |
| 1.31.10 | 25 / 17 | |
| 1.31.9 | 25 / 17 | |
| 1.31.8 | 25 / 17 | |
| 1.31.7 | 25 / 17 | |
| 1.31.6 | 25 / 17 | |
| 1.31.4 | 24 / 17 | |
| 1.31.3 | 23 / 17 | |
| 1.31.2 | 23 / 17 | |
| 1.31.1 | 23 / 17 | |
| 1.31.0 | 23 / 17 | |
| 1.30.0 | 23 / 18 | |
| 1.29.3 | 23 / 18 | |
| 1.29.2 | 23 / 18 | |
| 1.29.1 | 23 / 18 | |
| 1.28.34 | 23 / 18 | |
| 1.28.33 | 23 / 18 | |
| 1.28.32 | 23 / 13 | |
| 1.28.31 | 23 / 13 | |
| 1.28.30 | 23 / 13 | |
| 1.28.29 | 23 / 13 | |
| 1.28.28 | 23 / 13 | |
| 1.28.27 | 23 / 13 | |
| 1.28.26 | 23 / 13 | |
| 1.28.25 | 23 / 13 | |
| 1.28.24 | 22 / 13 | |
| 1.28.23 | 22 / 13 | |
| 1.28.22 | 21 / 13 | |
| 1.28.21 | 21 / 13 | |
| 1.28.20 | 21 / 13 | |
| 1.28.19 | 21 / 13 | |
| 1.28.18 | 21 / 13 | |
| 1.28.17 | 21 / 13 | |
| 1.28.16 | 21 / 13 | |
| 1.28.15 | 21 / 13 | |
| 1.28.14 | 21 / 13 | |
| 1.28.13 | 21 / 13 | |
| 1.28.12 | 21 / 13 | |
| 1.28.11 | 21 / 13 | |
| 1.28.10 | 21 / 13 | |
| 1.28.9 | 21 / 13 | |
| 1.28.8 | 21 / 13 | |
| 1.28.7 | 21 / 13 | |
| 1.28.6 | 21 / 13 | |
| 1.28.5 | 20 / 13 | |
| 1.28.4 | 20 / 13 | |
| 1.28.3 | 20 / 13 | |
| 1.28.2 | 20 / 13 | |
| 1.28.1 | 20 / 13 | |
| 1.26.2 | 20 / 13 |
v1.28.26
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.25
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.24
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.23
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.26.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.