vulnerabilities that were identified as part of the initial code audit carried out in July 2020. From the analysis of the provided source code repository and setup, it is evident that several vulnerabilities have issues that were identified as part of the initial code audit carried out in July 2020. From the analysis of the provided source code repository and setup, it is evident that the several flaws have not

Provenance generation Provenance Exists ⛔ ⛔ ⛔ Provenance is Authentic ⛔ ⛔ 8 https://sysdig.com/blog/analysis-of-supply-chain-attacks-through-public-docker-images/ 43 Dapr security audit 2023 Provenance library addon libraries (golang.org/x/…). This data has been generated by way of Class Hierarchy Analysis. A dependency can become malicious from a code change by either a contributor or a maintainer.

efforts of CNCF have focused on enabling continuous fuzzing of projects to ensure continued security analysis, which is done by way of the open source fuzzing project OSS-Fuzz1. CNCF continues work in this