Keycloak: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
4 checked entries were not usable (Empty or oversized document; requires a dedicated adapter; Feed item lacks substantive release notes)
Authelia: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
ZITADEL: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
authentik: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
Ory Kratos: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Ory Hydra: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes)
Ory Keto: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
4 checked entries were not usable (Feed item lacks substantive release notes)
Dex: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes)
OAuth2 Proxy: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Casbin: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
OpenFGA: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
SpiceDB: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Vault: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Empty or oversized document; requires a dedicated adapter; Feed item lacks substantive release notes)
OpenBao: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
4 checked entries were not usable (Feed item lacks substantive release notes)
step-ca: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
Bitwarden server: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Vaultwarden: Identity providers, authorization engines, secret stores and remote-access systems control access to production resources.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Jenkins: CI runners, source hosts and telemetry systems hold credentials, execute builds, or ingest untrusted data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
GitHub Actions runner: CI runners, source hosts and telemetry systems hold credentials, execute builds, or ingest untrusted data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
GitHub Actions checkout: CI runners, source hosts and telemetry systems hold credentials, execute builds, or ingest untrusted data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
4 checked entries were not usable (Feed item lacks substantive release notes)
GitHub Actions cache: CI runners, source hosts and telemetry systems hold credentials, execute builds, or ingest untrusted data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
Woodpecker CI: CI runners, source hosts and telemetry systems hold credentials, execute builds, or ingest untrusted data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Gitea alternate location: CI runners, source hosts and telemetry systems hold credentials, execute builds, or ingest untrusted data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
Prometheus: CI runners, source hosts and telemetry systems hold credentials, execute builds, or ingest untrusted data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
5 checked entries were not usable (Feed item lacks substantive release notes)
Structured advisory databases are configured by default; vendor feeds are opt-in. Catalog entries do not establish live uptime or complete coverage. Vendor checks verify retrieval and parsing, not extraction accuracy.
