Image security report: gitea recipe

gitea: grade D, 8 findings, one per advisory and package, in the 1 image of version 1.0.1: CRITICAL 0, HIGH 5, MEDIUM 2, LOW 0, UNKNOWN 1. Scanned 2026-11-07 11:47 UTC.

Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.

docker.gitea.com/gitea:28.3.0-rootless@sha256:40c5a68a0463c0940e1ae32626c8300dd0572f3558e390073ad8379ca67c0e1d

CRITICAL 0, HIGH 5, MEDIUM 2, LOW 0, UNKNOWN 1