Package · golang
stdlib
2 images ship it, in 1 version. Oldest version first. Search its versions.
Every image's package set is in the report, read from verified SBOMs, so an image missing from this page doesn't ship it.
go1.27.2
pkg:golang/stdlib@1.27.2
| Image | Repository | Package list read from |
|---|---|---|
| build-go:1 | ghcr.io/northcutted/clearcutt-showcase/platform/build-go | SBOM Verified. Found, and checked against a trusted signer in the policy. linux/amd64, linux/arm64 |
| checkout:latest | ghcr.io/northcutted/clearcutt-showcase/apps/checkout | SBOM Verified. Found, and checked against a trusted signer in the policy. linux/amd64, linux/arm64 |
Each image's package list was read from the evidence named, for the platform images listed (its packages are their union). Verified means a trusted signer vouched for all of it; anything else means some of it wasn't verified, so the list may not be complete. Not recorded means the report doesn't say where it came from.