Dependency Analysis
Sealed Secrets
Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.
100%
Freshness
100
Dependencies
0
Outdated
0
Stale
—
Avg Behind
Dependency List
Latest release helm-v2.18.5
| Dependency | Type | Current | Latest | Behind | CVE | License |
|---|---|---|---|---|---|---|
|
actions/checkout
githubactions
|
Direct | de0fac2e4500dabe0009e67214ff5f5447ce83dd | — | — | — | Unknown |
|
actions/checkout
githubactions
|
Direct | 2 | — | — | — | Unknown |
|
actions/download-artifact
githubactions
|
Direct | 37930b1c2abaa49bbe596cd826c3c89aef350131 | — | — | — | Unknown |
|
actions/setup-go
githubactions
|
Direct | 4b73464bb391d4059bd26b0524d20df3927bd417 | — | — | — | Unknown |
|
actions/setup-python
githubactions
|
Direct | 2 | — | — | — | Unknown |
|
actions/stale
githubactions
|
Direct | 997185467fa4f803885201cee163a9f38240193d | — | — | — | Unknown |
|
actions/upload-artifact
githubactions
|
Direct | b7c566a772e6b6bfb58ed0dc250532a479d7789f | — | — | — | Unknown |
|
azure/setup-helm
githubactions
|
Direct | 5119fcb9089d432beecbf79bb2c7915207344b78 | — | — | — | Unknown |
|
azure/setup-helm
githubactions
|
Direct | 1 | — | — | — | Unknown |
|
azure/setup-helm
githubactions
|
Direct | 1a275c3b69536ee54be43f2070a358922e12c8d4 | — | — | — | Unknown |
|
carvel-dev/setup-action
githubactions
|
Direct | a11507416d8fea298e923fe4356f4e4f4097f15b | — | — | — | Unknown |
|
dario.cat/mergo
golang
|
Transitive | v1.0.1 | — | — | — | BSD-3-Clause |
|
docker/build-push-action
githubactions
|
Direct | c56af957549030174b10d6867f20e78cfd7debc5 | — | — | — | Unknown |
|
docker/login-action
githubactions
|
Direct | 49ed152c8eca782a232dede0303416e8f356c37b | — | — | — | Unknown |
|
docker/metadata-action
githubactions
|
Direct | 69f6fc9d46f2f8bf0d5491e4aabe0bb8c6a4678a | — | — | — | Unknown |
|
docker/setup-buildx-action
githubactions
|
Direct | dc7b9719a96d48369863986a06765841d7ea23f6 | — | — | — | Unknown |
|
docker/setup-qemu-action
githubactions
|
Direct | 8b122486cedac8393e77aa9734c3528886e4a1a8 | — | — | — | Unknown |
|
github.com/beorn7/perks
golang
|
Transitive | v1.0.1 | — | — | — | MIT |
|
github.com/cespare/xxhash/v2
golang
|
Transitive | v2.3.0 | — | — | — | MIT |
|
github.com/davecgh/go-spew
golang
|
Transitive | v1.1.2-0.20180830191138-d8f796af33cc | — | — | — | ISC |
|
github.com/emicklei/go-restful/v3
golang
|
Transitive | v3.12.2 | — | — | — | MIT |
|
github.com/fxamacker/cbor/v2
golang
|
Transitive | v2.9.0 | — | — | — | MIT |
|
github.com/go-logr/logr
golang
|
Transitive | v1.4.3 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/jsonpointer
golang
|
Transitive | v0.21.0 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/jsonreference
golang
|
Transitive | v0.21.0 | — | — | — | Apache-2.0 |
|
github.com/go-openapi/swag
golang
|
Transitive | v0.23.0 | — | — | — | Apache-2.0 |
|
github.com/go-task/slim-sprig/v3
golang
|
Transitive | v3.0.0 | — | — | — | MIT |
|
github.com/gomodule/redigo
golang
|
Direct | v2.0.0+incompatible | — | — | — | Apache-2.0 |
|
github.com/google/gnostic-models
golang
|
Transitive | v0.7.0 | — | — | — | Apache-2.0 |
|
github.com/google/go-cmp
golang
|
Direct | v0.7.0 | — | — | — | BSD-3-Clause |
|
github.com/google/pprof
golang
|
Transitive | v0.0.0-20260115054156-294ebfa9ad83 | — | — | — | Apache-2.0 |
|
github.com/google/renameio
golang
|
Direct | v0.1.0 | — | — | — | Apache-2.0 |
|
github.com/google/uuid
golang
|
Transitive | v1.6.0 | — | — | — | BSD-3-Clause |
|
github.com/hashicorp/golang-lru
golang
|
Direct | v1.0.2 | — | — | — | MPL-2.0 |
|
github.com/huandu/xstrings
golang
|
Transitive | v1.5.0 | — | — | — | MIT |
|
github.com/josharian/intern
golang
|
Transitive | v1.0.0 | — | — | — | MIT |
|
github.com/json-iterator/go
golang
|
Transitive | v1.1.12 | — | — | — | MIT |
|
github.com/mailru/easyjson
golang
|
Transitive | v0.7.7 | — | — | — | MIT |
|
github.com/masterminds/goutils
golang
|
Transitive | v1.1.1 | — | — | — | Apache-2.0 |
|
github.com/masterminds/semver/v3
golang
|
Transitive | v3.4.0 | — | — | — | MIT |
|
github.com/masterminds/sprig/v3
golang
|
Direct | v3.3.0 | — | — | — | MIT |
|
github.com/mattn/go-isatty
golang
|
Direct | v0.0.21 | — | — | — | Unknown |
|
github.com/mitchellh/copystructure
golang
|
Transitive | v1.2.0 | — | — | — | MIT |
|
github.com/mitchellh/reflectwalk
golang
|
Transitive | v1.0.2 | — | — | — | MIT |
|
github.com/mkmik/multierror
golang
|
Direct | v0.4.0 | — | — | — | MIT |
|
github.com/modern-go/concurrent
golang
|
Transitive | v0.0.0-20180306012644-bacd9c7ef1dd | — | — | — | Apache-2.0 |
|
github.com/modern-go/reflect2
golang
|
Transitive | v1.0.3-0.20250322232337-35a7c28c31ee | — | — | — | Apache-2.0 |
|
github.com/munnerz/goautoneg
golang
|
Transitive | v0.0.0-20191010083416-a7dc8b61c822 | — | — | — | BSD-3-Clause |
|
github.com/onsi/ginkgo/v2
golang
|
Direct | v2.28.1 | — | — | — | MIT |
|
github.com/onsi/gomega
golang
|
Direct | v1.39.1 | — | — | — | MIT |
|
github.com/pmezard/go-difflib
golang
|
Transitive | v1.0.0 | — | — | — | BSD-3-Clause |
|
github.com/prometheus/client_golang
golang
|
Direct | v1.23.2 | — | — | — | Apache-2.0 |
|
github.com/prometheus/client_model
golang
|
Direct | v0.6.2 | — | — | — | Apache-2.0 |
|
github.com/prometheus/common
golang
|
Transitive | v0.66.1 | — | — | — | Apache-2.0 |
|
github.com/prometheus/procfs
golang
|
Transitive | v0.16.1 | — | — | — | Apache-2.0 |
|
github.com/shopspring/decimal
golang
|
Transitive | v1.4.0 | — | — | — | MIT |
|
github.com/spf13/cast
golang
|
Transitive | v1.7.0 | — | — | — | MIT |
|
github.com/spf13/pflag
golang
|
Direct | v1.0.10 | — | — | — | BSD-3-Clause |
|
github.com/throttled/throttled
golang
|
Direct | v2.2.5+incompatible | — | — | — | BSD-3-Clause |
|
github.com/x448/float16
golang
|
Transitive | v0.8.4 | — | — | — | MIT |
|
go.yaml.in/yaml/v2
golang
|
Transitive | v2.4.3 | — | — | — | Apache-2.0 AND MIT |
|
go.yaml.in/yaml/v3
golang
|
Transitive | v3.0.4 | — | — | — | Apache-2.0 AND MIT |
|
golang.org/x/crypto
golang
|
Direct | v0.50.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/mod
golang
|
Transitive | v0.34.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/net
golang
|
Transitive | v0.52.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/oauth2
golang
|
Transitive | v0.30.0 | — | — | — | BSD-3-Clause |
|
golang.org/x/sync
golang
|
Transitive | v0.20.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/sys
golang
|
Transitive | v0.43.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/term
golang
|
Transitive | v0.42.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/text
golang
|
Transitive | v0.36.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/time
golang
|
Transitive | v0.9.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
golang.org/x/tools
golang
|
Transitive | v0.43.0 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
google.golang.org/protobuf
golang
|
Transitive | v1.36.8 | — | — | — | BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang |
|
gopkg.in/evanphx/json-patch.v4
golang
|
Transitive | v4.13.0 | — | — | — | BSD-3-Clause |
|
gopkg.in/inf.v0
golang
|
Transitive | v0.9.1 | — | — | — | BSD-3-Clause |
|
gopkg.in/yaml.v2
golang
|
Direct | v2.4.0 | — | — | — | Apache-2.0 |
|
gopkg.in/yaml.v3
golang
|
Transitive | v3.0.1 | — | — | — | Apache-2.0 |
|
goreleaser/goreleaser-action
githubactions
|
Direct | e435ccd777264be153ace6237001ef4d979d3a7a | — | — | — | Unknown |
|
helm/chart-releaser-action
githubactions
|
Direct | 98bccfd32b0f76149d188912ac8e45ddd3f8695f | — | — | — | Unknown |
|
helm/chart-testing-action
githubactions
|
Direct | 2.0.1 | — | — | — | Unknown |
|
helm/kind-action
githubactions
|
Direct | 1.2.0 | — | — | — | Unknown |
|
k8s.io/api
golang
|
Direct | v0.35.4 | — | — | — | Unknown |
|
k8s.io/apimachinery
golang
|
Direct | v0.35.4 | — | — | — | Unknown |
|
k8s.io/client-go
golang
|
Direct | v0.35.4 | — | — | — | Unknown |
|
k8s.io/code-generator
golang
|
Direct | v0.35.4 | — | — | — | Apache-2.0 |
|
k8s.io/gengo/v2
golang
|
Transitive | v2.0.0-20250922181213-ec3ebc5fd46b | — | — | — | Apache-2.0 |
|
k8s.io/klog
golang
|
Direct | v1.0.0 | — | — | — | Apache-2.0 |
|
k8s.io/klog/v2
golang
|
Direct | v2.140.0 | — | — | — | Apache-2.0 |
|
k8s.io/kube-openapi
golang
|
Transitive | v0.0.0-20250910181357-589584f1c912 | — | — | — | Apache-2.0 |
|
k8s.io/utils
golang
|
Direct | v0.0.0-20251002143259-bc988d571ff4 | — | — | — | Apache-2.0 |
|
medyagh/setup-minikube
githubactions
|
Direct | e9e035a86bbc3caea26a450bd4dbf9d0c453682e | — | — | — | Unknown |
|
sigs.k8s.io/json
golang
|
Transitive | v0.0.0-20250730193827-2d320260d730 | — | — | — | Apache-2.0 AND BSD-3-Clause |
|
sigs.k8s.io/randfill
golang
|
Transitive | v1.0.0 | — | — | — | Apache-2.0 |
|
sigs.k8s.io/structured-merge-diff/v6
golang
|
Transitive | v6.3.0 | — | — | — | Apache-2.0 |
|
sigs.k8s.io/yaml
golang
|
Transitive | v1.6.0 | — | — | — | Apache-2.0 AND BSD-3-Clause AND MIT |
|
sigstore/cosign-installer
githubactions
|
Direct | e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 | — | — | — | Unknown |
|
sigstore/cosign-installer
githubactions
|
Direct | 0f983226cbf1ee0368469d3e2b33417ceec4c225 | — | — | — | Unknown |
|
test-summary/action
githubactions
|
Direct | 31493c76ec9e7aa675f1585d3ed6f1da69269a86 | — | — | — | Unknown |
|
vmware-labs/vmware-image-builder-action
githubactions
|
Direct | 90ab5b51680627fe01ea9b2d9ba5d7c9db4c56bc | — | — | — | Unknown |
License Breakdown
Unknown
29
Apache-2.0
25
MIT
19
BSD-3-Clause
10
BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang
10
Apache-2.0 AND MIT
2
Apache-2.0 AND BSD-3-Clause
1
Apache-2.0 AND BSD-3-Clause AND MIT
1
ISC
1
MPL-2.0
1
CVE Severity
critical
0
high
0
medium
0
low
0
unknown
0