Repository navigation

Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

Please report vulnerabilities privately via this form.

`build --push` signs whatever the first tag points to after the push, not the image it built
GHSA-5c53-pm9x-v2gr published Nov 2, 2026 by gmpinder

Moderate

Learn more about advisories related to blue-build/cli in the GitHub Advisory Database