boks Index
Docs Releases

git

1 tool · 1 release line

Distributed version control system. Every tool here carries the same sandbox boundary.

boks git
Source ↗ Registry ↗

Release lines we maintain · the project decides these

findings shown are the whole project at that line

Tag Resolves to Lifecycle Updated Findings What the tag promises
  • stable — floats, carries security updates
  • unstable — tracks pre-releases, may break
  • eol — frozen, upstream is done

Tools in this project · pick one to inspect

all share one boundary

Tool Capabilities Seccomp Findings Image Description
showing git from git@latest → 2.53.0 stable

Findings

H1

identical on arm64, amd64 — one table describes both

CVE Sev CVSS Affects Description
CVE-2024-52005 ↗ H 8.8 git Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel".

1 further advisory matched this image and was assessed not to apply to it — see the VEX document for the reasoning and the evidence

CVE Affects Assessed
CVE-2026-27171 zlib not affected · vex

These are the findings of git, which ships every tool in this project. boks reports and gates; it never edits an image to clear a finding.

Composition

default + env, ssh
runtime none — self-contained
composes env, ssh

Some tools are only useful composed: a pip-installed CLI needs python as its runtime, bash pulls in coreutils. boks resolves that for you — -e git,python:flake8 composes explicitly.

Image

image ghcr.io/boks-sh/git:2.53.0
digest
platforms
size 5 MB unpacked · 1 layer
base scratch
signed cosign · verified
last scan

Sandbox boundary

git

capabilities

netrw

Filled is granted by default; the rest need --cap at the point of use.

seccomp tier

per tool

default

The syscall filter applied to this tool's entry point. Tools sharing an image do not share a tier.

dotfiles mapped in

read-only unless noted

none

env passed through

3 of 3

GIT_EXEC_PATHGIT_SSL_CAINFOGIT_TERMINAL_PROMPT

Nothing else crosses in. No AWS_*, no SSH_AUTH_SOCK unless you ask.

per-subcommand

no overrides

Every invocation gets the same boundary. Where a tool needs more for one subcommand only, boks scopes it there rather than granting it everywhere.

Provenance

sbom arm64 ↗ amd64 ↗
attestation arm64 ↗ amd64 ↗
scan report arm64 ↗ amd64 ↗ grype ·
vex arm64 ↗ amd64 ↗

Every image ships a full SBOM and a signed build attestation. Nothing here is a claim you have to take on trust.

1 findings across this project at latest. Counted once per advisory across every image the project builds.