OS security updates
- Linux kernel and kernel package vulnerabilities.
- Microsoft Windows vulnerabilities related to out-of-date versions, missing security updates or security patches.
OS packages
Workload scanner will report on packages provided by vendors (e.g. Ubuntu, RedHat) and OS package managers (e.g.yum, apk, dpkg, etc.).
Workload scanner does not report on self-compiled packages or binaries.
| OS | Security Advisory |
|---|---|
| AlmaLinux | AlmaLinux Product Errata |
| Alpine Linux | Alpine Security Database |
| Amazon Linux | Amazon Linux Security Center |
| Arch Linux | Vulnerable issues - Arch Linux |
| Azure Linux | Azure Linux Vulnerability Data |
| Chainguard/Wolfi Linux | Chainguard Security Advisories |
| Debian | Debian Security Bug Tracker |
| Microsoft Windows | Microsoft Security Update Guide |
| OpenSUSE | OpenSUSE Security CVRF |
| Oracle Linux | Oracle Linux Security |
| Photon OS | Photon Security Advisories |
| RHEL/CentOS | Red Hat Security Data |
| Rocky Linux | Rocky Enterprise Software Foundation Product Errata |
| Ubuntu | Ubuntu Security CVE Reports |
Programming language specific packages
Workload scanner will report on packages managed by language specific package managers (e.g.npm, yarn, pip, gem, etc.) and the related manifest files and post-build artifacts (e.g. package.json, package-lock.json, yarn.lock, Pipfile.lock, requirements.txt, Gemfile.lock, gemspec, etc.).