VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/tektoncd/chains: vulnerability history, versions and safety

github.com/tektoncd/chains is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/tektoncd/chains vulnerabilities

Vulert verdict on github.com/tektoncd/chains v0.29.9 i

Updated on 23 Oct 2026

Good news: v0.29.9, the version you would install today, has no known vulnerabilities.

Package health score 80/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Moderate

What to do: Stay on v0.29.9 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.29.9 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.29.9 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 280 i
  • OpenSSF scorecard 6/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/tektoncd/chains, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.27.9 22 Oct 2026 none Apache-2.0 — Details →
v0.29.1-0.20261022072325-2d7c984980f2 22 Oct 2026 none Apache-2.0 — Details →
v0.29.9 22 Oct 2026 none Apache-2.0 — Details →
v0.29.1-0.20261016084121-fb16aefb0214 16 Oct 2026 none Apache-2.0 — Details →
v0.29.1-0.20261012070720-0b20951e9e55 12 Oct 2026 none Apache-2.0 — Details →
v0.27.8 12 Oct 2026 none Apache-2.0 — Details →
v0.29.1-0.20261009090722-b88abdade791 09 Oct 2026 none Apache-2.0 — Details →
v0.29.1-0.20261006081917-9565e57bc383 06 Oct 2026 none Apache-2.0 — Details →
v0.28.9 05 Oct 2026 none Apache-2.0 — Details →
v0.29.7 29 Sep 2026 none Apache-2.0 — Details →
v0.28.8 29 Sep 2026 none Apache-2.0 — Details →
v0.29.1-0.20260929064652-7f543807e53b 29 Sep 2026 none Apache-2.0 — Details →
v0.29.6 24 Sep 2026 none Apache-2.0 — Details →
v0.28.7 23 Sep 2026 none Apache-2.0 — Details →
v0.29.1-0.20260923083049-f516d04afa9f 23 Sep 2026 none Apache-2.0 — Details →
v0.29.1-0.20260917104047-ab470c77c70d 17 Sep 2026 none Apache-2.0 — Details →
v0.29.1-0.20260917054847-f74c6d63a8e6 17 Sep 2026 none Apache-2.0 — Details →
v0.28.6 17 Sep 2026 none Apache-2.0 — Details →
v0.29.5 17 Sep 2026 none Apache-2.0 — Details →
v0.29.4 08 Sep 2026 none Apache-2.0 — Details →
v0.29.1-0.20260908023242-9833d83e0925 08 Sep 2026 none Apache-2.0 — Details →
v0.28.5 08 Sep 2026 none Apache-2.0 — Details →
v0.29.1-0.20260904075240-5f3659a928ad 04 Sep 2026 none Apache-2.0 — Details →
v0.28.4 01 Sep 2026 none Apache-2.0 — Details →
v0.29.1-0.20260901054239-4637a4fdf920 01 Sep 2026 none Apache-2.0 — Details →
v0.29.3 31 Aug 2026 none Apache-2.0 — Details →
v0.29.1-0.20260826062839-93ff01b827b0 26 Aug 2026 none Apache-2.0 — Details →
v0.28.3 26 Aug 2026 none Apache-2.0 — Details →
v0.29.1-0.20260825081436-99b0974199af 25 Aug 2026 none Apache-2.0 — Details →
v0.29.1-0.20260824053036-f8fe2c0f0544 24 Aug 2026 none Apache-2.0 — Details →
v0.29.1-0.20260819113835-f24a07fd347e 19 Aug 2026 none Apache-2.0 — Details →
v0.29.1-0.20260817090215-c072726dfa8e 17 Aug 2026 none Apache-2.0 — Details →
v0.29.2 17 Aug 2026 none Apache-2.0 — Details →
v0.29.1-0.20260813162015-38e04e2282c5 13 Aug 2026 none Apache-2.0 — Details →
v0.29.1-0.20260813064813-f7d1ba729df4 13 Aug 2026 none Apache-2.0 — Details →
v0.29.1 11 Aug 2026 none Apache-2.0 — Details →
v0.28.2 11 Aug 2026 none Apache-2.0 — Details →
v0.29.1-0.20260810063812-0548d01edb01 10 Aug 2026 none Apache-2.0 — Details →
v0.26.9 05 Aug 2026 none Apache-2.0 — Details →
v0.29.1-0.20260805140811-c467a021c217 05 Aug 2026 none Apache-2.0 — Details →
v0.29.0 04 Aug 2026 none Apache-2.0 — Details →
v0.27.1-0.20260803063007-cb6a244f895e 03 Aug 2026 none Apache-2.0 — Details →
v0.27.6 28 Jul 2026 none Apache-2.0 — Details →
v0.27.1-0.20260728125206-0b97f8620a6d 28 Jul 2026 none Apache-2.0 — Details →
v0.26.8 28 Jul 2026 none Apache-2.0 — Details →
v0.27.5 23 Jul 2026 none Apache-2.0 — Details →
v0.26.7 23 Jul 2026 none Apache-2.0 — Details →
v0.27.1-0.20260717080201-dbcab312b07a 17 Jul 2026 none Apache-2.0 — Details →
v0.27.4 14 Jul 2026 none Apache-2.0 — Details →
v0.28.1 14 Jul 2026 none Apache-2.0 — Details →
v0.28.0 10 Jul 2026 none Apache-2.0 — Details →
v0.27.1-0.20260710092842-9c537538a67f 10 Jul 2026 none Apache-2.0 — Details →
v0.27.1-0.20260709110843-e6fbad8626ec 09 Jul 2026 none Apache-2.0 — Details →
v0.27.3 09 Jul 2026 none Apache-2.0 — Details →
v0.26.6 09 Jul 2026 none Apache-2.0 — Details →
v0.27.1-0.20260702001039-2ec4b4dcb766 02 Jul 2026 none Apache-2.0 — Details →
v0.27.2 24 Jun 2026 none Apache-2.0 — Details →
v0.26.5 12 Jun 2026 none Apache-2.0 — Details →
v0.27.1-0.20260608111230-21bc33ac11d4 08 Jun 2026 none Apache-2.0 — Details →
v0.27.1 08 Jun 2026 none Apache-2.0 — Details →
v0.27.1-0.20260528072626-2a68e6a99a29 28 May 2026 none Apache-2.0 — Details →
v0.27.0 26 May 2026 none Apache-2.0 — Details →
v0.26.1-0.20260518072621-12e6db02f76a 18 May 2026 none Apache-2.0 — Details →
v0.26.4 14 May 2026 none Apache-2.0 — Details →
v0.26.1-0.20260422073109-7290445c35b8 22 Apr 2026 none Apache-2.0 — Details →
v0.25.2 21 Apr 2026 none Apache-2.0 — Details →
v0.26.3 16 Apr 2026 none Apache-2.0 — Details →
v0.26.1-0.20260410090900-fc64ff40d6ff 10 Apr 2026 none Apache-2.0 — Details →
v0.26.1-0.20260330090854-31743e62801b 30 Mar 2026 none Apache-2.0 — Details →
v0.0.0-20260327122653-53834cb7da66 27 Mar 2026 none Apache-2.0 — Details →
v0.26.1-0.20260327122653-53834cb7da66 27 Mar 2026 none Apache-2.0 — Details →
v0.26.1-0.20260324115451-8e8b95a5920a 24 Mar 2026 none Apache-2.0 — Details →
v0.26.1-0.20260217065237-a4ed4a20c875 17 Feb 2026 none Apache-2.0 — Details →
v0.26.2 05 Feb 2026 none Apache-2.0 — Details →
v0.26.1-0.20260204104313-60afd54a61a7 04 Feb 2026 none Apache-2.0 — Details →
v0.20.2-0.20260203100940-9343090e50f3 03 Feb 2026 none Apache-2.0 — Details →
v0.26.1 27 Jan 2026 none Apache-2.0 — Details →
v0.26.1-0.20260122101911-9309310537d1 22 Jan 2026 none Apache-2.0 — Details →
v0.26.1-0.20260120151135-99e2f1c7e79e 20 Jan 2026 none Apache-2.0 — Details →
v0.26.1-0.20260113180707-5abdfb665358 13 Jan 2026 none Apache-2.0 — Details →
v0.26.1-0.20260113180505-aec00d5467bc 13 Jan 2026 none Apache-2.0 — Details →
v0.26.1-0.20260107164101-0e98b570184d 07 Jan 2026 none Apache-2.0 — Details →
v0.26.1-0.20251113100631-3754523be622 13 Nov 2025 none Apache-2.0 — Details →
v0.26.1-0.20251110063629-37297be81bb6 10 Nov 2025 none Apache-2.0 — Details →
v0.26.1-0.20251105114900-21dfd1e95977 05 Nov 2025 none Apache-2.0 — Details →
v0.26.0 05 Nov 2025 none Apache-2.0 — Details →
v0.25.1-0.20250530055451-3fcd2cbbc137 30 May 2025 none Apache-2.0 — Details →
v0.25.1 19 May 2025 none Apache-2.0 — Details →
v0.25.1-0.20250514053418-c601c10baee6 14 May 2025 none Apache-2.0 — Details →
v0.25.0 06 May 2025 none Apache-2.0 — Details →
v0.24.1-0.20250211185052-1ccf29bf2b50 11 Feb 2025 none Apache-2.0 — Details →
v0.24.0 11 Feb 2025 none Apache-2.0 — Details →
v0.23.1-0.20250121143935-f488a696dba4 21 Jan 2025 none Apache-2.0 — Details →
v0.23.1 21 Jan 2025 none Apache-2.0 — Details →
v0.22.3 20 Jan 2025 none Apache-2.0 — Details →
v0.23.1-0.20241209160430-579ef8e493c7 09 Dec 2024 none Apache-2.0 — Details →
v0.23.1-0.20241125172914-a01211b281c8 25 Nov 2024 none Apache-2.0 — Details →
v0.23.1-0.20241121151335-bb2a4533e685 21 Nov 2024 none Apache-2.0 — Details →
v0.23.1-0.20241118190312-edb9e4802dd8 18 Nov 2024 none Apache-2.0 — Details →
v0.23.1-0.20241112163018-287373e8247c 12 Nov 2024 none Apache-2.0 — Details →
v0.23.0 05 Nov 2024 none — — Details →
v0.22.1-0.20241101151103-1e43c8cef45b 01 Nov 2024 none — — Details →
v0.22.1-0.20240927182404-cd9106b8d3af 27 Sep 2024 none — — Details →
v0.22.2 26 Sep 2024 none — — Details →
v0.22.1-0.20240926141804-455972d6be00 26 Sep 2024 none — — Details →
v0.22.1 16 Sep 2024 none — — Details →
v0.22.1-0.20240910134120-829d1eb1e267 10 Sep 2024 none — — Details →
v0.22.1-0.20240822143812-821f7c446131 22 Aug 2024 none — — Details →
v0.22.0 19 Aug 2024 none — — Details →
v0.21.1-0.20240704162728-7ed9b425eda4 04 Jul 2024 none — — Details →
v0.21.1 10 Jun 2024 none — — Details →
v0.21.1-0.20240608190314-750a98e0e0cd 08 Jun 2024 none — — Details →
v0.21.1-0.20240523175439-dc4e8acf1421 23 May 2024 none — — Details →
v0.21.0 22 May 2024 none — — Details →
v0.20.1-0.20240517155032-c17cdfc70a1b 17 May 2024 none — — Details →
v0.16.2 20 Mar 2024 none — — Details →
v0.19.1 20 Mar 2024 none — — Details →
v0.20.1 20 Mar 2024 none — — Details →
v0.20.1-0.20240319161434-94787c87b530 19 Mar 2024 none — — Details →
v0.20.1-0.20240315152833-3412d899cba0 15 Mar 2024 none — — Details →

The newest 120 of 357 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/tektoncd/chains

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/tektoncd/chains

Is github.com/tektoncd/chains safe to use?

Vulert has no vulnerabilities on record for github.com/tektoncd/chains in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/tektoncd/chains's Vulert package health score?

Vulert scores github.com/tektoncd/chains 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/tektoncd/chains affected?

No. v0.29.9, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

How many vulnerabilities does github.com/tektoncd/chains have?

0 vulnerabilities are recorded for github.com/tektoncd/chains in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/tektoncd/chains vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/tektoncd/chains in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/tektoncd/chains are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/tektoncd/chains for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/tektoncd/chains version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.