lockdep

lockdep/stackradar

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

9 good first / help-wanted issues · TypeScript · last activity Oct 24, 2026

4 stars 0 forks 4 watchers TypeScript GNU Affero General Public License v3.0
cisa-kev container-security cve cyclonedx devsecops epss helm kubernetes kubernetes-security nextjs osv sbom security security-tools self-hosted supply-chain-security syft typescript vulnerability-management vulnerability-scanner
View on GitHub Website
9 Open Issues Need Help Last updated: Oct 24, 2026

Open Issues Need Help

View All on GitHub
Refresh the vendored end-of-life schedule and document how to 1 day ago
good first issue
lockdep/stackradar
4

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

TypeScript
#cisa-kev#container-security#cve#cyclonedx#devsecops#epss#helm#kubernetes#kubernetes-security#nextjs#osv#sbom#security#security-tools#self-hosted#supply-chain-security#syft#typescript#vulnerability-management#vulnerability-scanner
Document which ecosystems the mirror covers, and which distros have no OSV feed 1 day ago
documentation good first issue
lockdep/stackradar
4

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

TypeScript
#cisa-kev#container-security#cve#cyclonedx#devsecops#epss#helm#kubernetes#kubernetes-security#nextjs#osv#sbom#security#security-tools#self-hosted#supply-chain-security#syft#typescript#vulnerability-management#vulnerability-scanner
Group Dependabot updates into one pull request per ecosystem per week 1 day ago
good first issue
lockdep/stackradar
4

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

TypeScript
#cisa-kev#container-security#cve#cyclonedx#devsecops#epss#helm#kubernetes#kubernetes-security#nextjs#osv#sbom#security#security-tools#self-hosted#supply-chain-security#syft#typescript#vulnerability-management#vulnerability-scanner
Show how much PostgreSQL storage the mirror, SBOMs, findings and inventory use in the admin panel 1 day ago
enhancement help wanted in triage
lockdep/stackradar
4

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

TypeScript
#cisa-kev#container-security#cve#cyclonedx#devsecops#epss#helm#kubernetes#kubernetes-security#nextjs#osv#sbom#security#security-tools#self-hosted#supply-chain-security#syft#typescript#vulnerability-management#vulnerability-scanner
Troubleshooting page for the first-install questions 1 day ago
documentation good first issue
lockdep/stackradar
4

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

TypeScript
#cisa-kev#container-security#cve#cyclonedx#devsecops#epss#helm#kubernetes#kubernetes-security#nextjs#osv#sbom#security#security-tools#self-hosted#supply-chain-security#syft#typescript#vulnerability-management#vulnerability-scanner
Export suppressed and accepted-risk findings as OpenVEX 1 day ago
enhancement help wanted
lockdep/stackradar
4

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

TypeScript
#cisa-kev#container-security#cve#cyclonedx#devsecops#epss#helm#kubernetes#kubernetes-security#nextjs#osv#sbom#security#security-tools#self-hosted#supply-chain-security#syft#typescript#vulnerability-management#vulnerability-scanner
Configurable threshold for webhook alerts 1 day ago
enhancement help wanted
lockdep/stackradar
4

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

TypeScript
#cisa-kev#container-security#cve#cyclonedx#devsecops#epss#helm#kubernetes#kubernetes-security#nextjs#osv#sbom#security#security-tools#self-hosted#supply-chain-security#syft#typescript#vulnerability-management#vulnerability-scanner
Export a findings table as CSV 1 day ago
enhancement help wanted
lockdep/stackradar
4

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

TypeScript
#cisa-kev#container-security#cve#cyclonedx#devsecops#epss#helm#kubernetes#kubernetes-security#nextjs#osv#sbom#security#security-tools#self-hosted#supply-chain-security#syft#typescript#vulnerability-management#vulnerability-scanner
Accept SPDX SBOM uploads alongside CycloneDX 1 day ago
enhancement help wanted
lockdep/stackradar
4

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud.

TypeScript
#cisa-kev#container-security#cve#cyclonedx#devsecops#epss#helm#kubernetes#kubernetes-security#nextjs#osv#sbom#security#security-tools#self-hosted#supply-chain-security#syft#typescript#vulnerability-management#vulnerability-scanner