Repository navigation
Core tool version drift detected #93
Description
Core tool supply-chain watch
| Tool | Pinned | Latest | Drift | Socket (pinned) | Socket (latest) |
|---|---|---|---|---|---|
| OpenGrep (SAST engine) | v1.26.0 |
v1.31.0 |
⬆️ v1.31.0 |
✅ clean (635 alerts) | ❓ coordinate not resolvable |
| TruffleHog (secret scanner) | 3.96.0 |
v3.99.3 |
⬆️ v3.99.3 |
✅ clean (22 alerts) | ✅ clean (17 alerts) |
| Trivy (Socket trivy-dist) | 0.76.1 |
0.76.1 |
✅ current | ✅ clean (23 alerts) | ✅ clean (23 alerts) |
| Socket SDK (socket-sdk-python) | 3.6.1 |
3.6.1 |
✅ current | ✅ clean (5 alerts) | ✅ clean (5 alerts) |
| Socket Python CLI (socket-python-cli) | 2.11.3 |
2.11.3 |
✅ current | ✅ clean (6 alerts) | ✅ clean (6 alerts) |
| Socket npm CLI (socket-cli) | 1.1.165 |
1.9.1 |
⬆️ 1.9.1 |
✅ clean (3 alerts) | ✅ clean (2 alerts) |
Notes
- OpenGrep (SAST engine): GitHub-release binary; not Dependabot-trackable and not covered by Socket's pkg:github coordinates. Falls back to the upstream Semgrep lineage (pkg:pypi/semgrep) as a project-health proxy -- this does NOT analyze OpenGrep's own release artifacts, so it is reported, never build-failing.
- Trivy (Socket trivy-dist): Release drift follows the Socket-built ghcr.io/socketdev/trivy package (produced by SocketDev/trivy-dist and mirrored privately to Docker Hub), not Aqua's release feed. Socket scoring uses the corresponding upstream Go module because trivy-dist rebuilds that source without modification.
Activity
github-actions commentedon Aug 3, 2026
Drift re-detected by run #30796427782; body updated.
github-actions commentedon Aug 12, 2026
Drift re-detected by run #31623205851; body updated.
github-actions commentedon Aug 17, 2026
Drift re-detected by run #32005675573; body updated.
github-actions commentedon Aug 24, 2026
Drift re-detected by run #32701512541; body updated.
github-actions commentedon Aug 31, 2026
Drift re-detected by run #33368032583; body updated.
github-actions commentedon Sep 2, 2026
Drift re-detected by run #33682523648; body updated.
github-actions commentedon Sep 2, 2026
Drift re-detected by run #33697316263; body updated.
github-actions commentedon Sep 7, 2026
Drift re-detected by run #34095181965; body updated.
github-actions commentedon Sep 10, 2026
Drift re-detected by run #34517288573; body updated.
github-actions commentedon Sep 10, 2026
Drift re-detected by run #34539198453; body updated.
github-actions commentedon Sep 14, 2026
Drift re-detected by run #34817715932; body updated.
github-actions commentedon Sep 15, 2026
Drift re-detected by run #35011511460; body updated.
github-actions commentedon Sep 18, 2026
Drift re-detected by run #35384363560; body updated.
github-actions commentedon Sep 19, 2026
Drift re-detected by run #35417114921; body updated.
github-actions commentedon Sep 21, 2026
Drift re-detected by run #35572945322; body updated.
github-actions commentedon Sep 28, 2026
Drift re-detected by run #36392272020; body updated.
github-actions commentedon Oct 5, 2026
Drift re-detected by run #37278822201; body updated.
github-actions commentedon Oct 12, 2026
Drift re-detected by run #38219193885; body updated.
github-actions commentedon Oct 19, 2026
Drift re-detected by run #39216482726; body updated.
github-actions commentedon Oct 21, 2026
Drift re-detected by run #39532491664; body updated.
github-actions commentedon Oct 21, 2026
Drift re-detected by run #39532543238; body updated.
github-actions commentedon Oct 21, 2026
Drift re-detected by run #39534508745; body updated.
github-actions commentedon Oct 21, 2026
Drift re-detected by run #39534791938; body updated.
github-actions commentedon Oct 21, 2026
Drift re-detected by run #39682026956; body updated.
github-actions commentedon Oct 22, 2026
Drift re-detected by run #39716659038; body updated.