talos
Warn
Audited by Snyk on Aug 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The document references pulling/executing container images from the GitHub Container Registry (ghcr.io/siderolabs/installer:v1.13.0 and ghcr.io/siderolabs/installer:v1.13.1), which are runtime external artifacts that will be fetched and executed on nodes during install/upgrade.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata