Drift Detector

DevSecOps Cockpit {{ counts.reposScanned }} repos · {{ generated }} SBOMSCA VEXSARIF CVE · EOL · sunsets

● {{ counts.fixes }} fixes needed · {{ counts.reposAffected }} of {{ counts.reposScanned }} repos affected

{{ g.title }}

{{ heroTitle }}

{{ heroWhy }} past-due≤ 6 mo upcoming
{{ tip.vendor }} {{ tip.unit }} retires {{ tip.date }} ({{ tip.when }})
repo {{ tip.repo }}
{{ tip.statusLabel }}
Vendors this code calls whose retirement list nobody has checked. Zero findings for these is UNAUDITED, not clean.
Sub-dependencies the scan couldn't crawl — private or unreachable.

Nothing found.

View / copy — the canonical drift.json every surface projects from (read-only; the verified source of truth).

{{ driftJsonText }}

{{ sbomHeaderText }}

TypeComponentVersionUsed inVulns
{{ c.type }} {{ c.purl }} {{ c.version }} {{ c.repoCount }} repo{{ c.repoCount === 1 ? '' : 's' }} {{ c.vulnCount }} {{ c.vulnSeverity }}

CycloneDX 1.5 (sbom.json) → Dependency-Track, GitHub · Open in Rancher SBOM viewer ↗

{{ sbomJsonText }}

SPDX 2.3 (sbom.spdx.json) · Open in Rancher SBOM viewer ↗

{{ spdxJsonText }}

{{ sarifHeaderText }}

{{ g.ruleId }}{{ g.count }}
LocationMessageLevel
{{ r.where }} {{ r.message }} {{ r.level }}

SARIF 2.1.0 (drift.sarif.json) — file:line results → GitHub code scanning, VS Code · Open in SARIF web viewer ↗

{{ sarifJsonText }}