Skip to content

Insights: gittuf/gittuf

Dependency graph

Last updated by Dependabot Dec 15, 2025
Clear
189 Total

Filter by ecosystem

  • dario.cat/mergo v1.0.1 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · BSD-3-Clause

    Paths for dario.cat/mergo v1.0.1

    Paths for dario.cat/mergo v1.0.1
    Showing 3 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/gitsign v0.12.0 ... dario.cat/mergo v1.0.1
    • github.com/sigstore/gitsign v0.12.0 dario.cat/mergo v1.0.1
    • github.com/go-git/go-git/v5 v5.16.4 dario.cat/mergo v1.0.1
  • github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2

    Paths for github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
    Showing 6 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/gitsign v0.12.0 ... github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
    • github.com/sigstore/gitsign v0.12.0 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
    • github.com/sigstore/sigstore-go v0.6.2 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
    • github.com/sigstore/sigstore-go v0.6.2 ... github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
    • github.com/sigstore/cosign/v2 v2.4.1 ... github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
    • github.com/sigstore/cosign/v2 v2.4.1 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
  • github.com/atotto/clipboard v0.1.4 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · BSD-3-Clause

    Paths for github.com/atotto/clipboard v0.1.4

    Paths for github.com/atotto/clipboard v0.1.4
    Showing 1 path. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/charmbracelet/bubbles v0.21.0 github.com/atotto/clipboard v0.1.4
  • github.com/aymanbagabas/go-osc52/v2 v2.0.1 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/aymanbagabas/go-osc52/v2 v2.0.1

    Paths for github.com/aymanbagabas/go-osc52/v2 v2.0.1
    Showing 6 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/charmbracelet/lipgloss v1.1.0 github.com/aymanbagabas/go-osc52/v2 v2.0.1
    • github.com/charmbracelet/bubbles v0.21.0 ... github.com/aymanbagabas/go-osc52/v2 v2.0.1
    • github.com/charmbracelet/bubbles v0.21.0 github.com/aymanbagabas/go-osc52/v2 v2.0.1
    • github.com/charmbracelet/bubbletea v1.3.10 ... github.com/aymanbagabas/go-osc52/v2 v2.0.1
    • github.com/charmbracelet/bubbletea v1.3.10 github.com/aymanbagabas/go-osc52/v2 v2.0.1
    • github.com/charmbracelet/lipgloss v1.1.0 ... github.com/aymanbagabas/go-osc52/v2 v2.0.1
  • github.com/blang/semver v3.5.1+incompatible Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/blang/semver v3.5.1+incompatible

    Paths for github.com/blang/semver v3.5.1+incompatible
    Showing 6 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/sigstore-go v0.6.2 ... github.com/blang/semver v3.5.1+incompatible
    • github.com/sigstore/sigstore-go v0.6.2 github.com/blang/semver v3.5.1+incompatible
    • github.com/sigstore/cosign/v2 v2.4.1 ... github.com/blang/semver v3.5.1+incompatible
    • github.com/sigstore/cosign/v2 v2.4.1 github.com/blang/semver v3.5.1+incompatible
    • github.com/sigstore/gitsign v0.12.0 ... github.com/blang/semver v3.5.1+incompatible
    • github.com/sigstore/gitsign v0.12.0 github.com/blang/semver v3.5.1+incompatible
  • github.com/charmbracelet/bubbles v0.21.0 Direct
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/charmbracelet/bubbles v0.21.0

    Paths for github.com/charmbracelet/bubbles v0.21.0
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive
  • github.com/charmbracelet/bubbletea v1.3.10 Direct
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/charmbracelet/bubbletea v1.3.10

    Paths for github.com/charmbracelet/bubbletea v1.3.10
    Showing 1 path. Export SBOM to view all paths. Learn more about SBOMS.

      Direct

    • github.com/charmbracelet/bubbletea v1.3.10

      Transitive

    • github.com/charmbracelet/bubbles v0.21.0 github.com/charmbracelet/bubbletea v1.3.10
  • github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc

    Paths for github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
    Showing 6 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/charmbracelet/bubbles v0.21.0 ... github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
    • github.com/charmbracelet/bubbletea v1.3.10 ... github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
    • github.com/charmbracelet/bubbletea v1.3.10 github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
    • github.com/charmbracelet/lipgloss v1.1.0 github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
    • github.com/charmbracelet/lipgloss v1.1.0 ... github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
    • github.com/charmbracelet/bubbles v0.21.0 github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
  • github.com/charmbracelet/lipgloss v1.1.0 Direct
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/charmbracelet/lipgloss v1.1.0

    Paths for github.com/charmbracelet/lipgloss v1.1.0
    Showing 3 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Direct

    • github.com/charmbracelet/lipgloss v1.1.0

      Transitive

    • github.com/charmbracelet/bubbles v0.21.0 github.com/charmbracelet/lipgloss v1.1.0
    • github.com/charmbracelet/bubbles v0.21.0 ... github.com/charmbracelet/lipgloss v1.1.0
    • github.com/charmbracelet/bubbletea v1.3.10 github.com/charmbracelet/lipgloss v1.1.0
  • github.com/charmbracelet/x/ansi v0.10.1 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/charmbracelet/x/ansi v0.10.1

    Paths for github.com/charmbracelet/x/ansi v0.10.1
    Showing 6 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/charmbracelet/lipgloss v1.1.0 ... github.com/charmbracelet/x/ansi v0.10.1
    • github.com/charmbracelet/bubbles v0.21.0 ... github.com/charmbracelet/x/ansi v0.10.1
    • github.com/charmbracelet/bubbles v0.21.0 github.com/charmbracelet/x/ansi v0.10.1
    • github.com/charmbracelet/bubbletea v1.3.10 ... github.com/charmbracelet/x/ansi v0.10.1
    • github.com/charmbracelet/bubbletea v1.3.10 github.com/charmbracelet/x/ansi v0.10.1
    • github.com/charmbracelet/lipgloss v1.1.0 github.com/charmbracelet/x/ansi v0.10.1
  • github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd

    Paths for github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd
    Showing 5 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/charmbracelet/bubbles v0.21.0 github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd
    • github.com/charmbracelet/bubbles v0.21.0 ... github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd
    • github.com/charmbracelet/bubbletea v1.3.10 ... github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd
    • github.com/charmbracelet/bubbletea v1.3.10 github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd
    • github.com/charmbracelet/lipgloss v1.1.0 github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd
  • github.com/charmbracelet/x/term v0.2.1 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/charmbracelet/x/term v0.2.1

    Paths for github.com/charmbracelet/x/term v0.2.1
    Showing 6 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/charmbracelet/lipgloss v1.1.0 github.com/charmbracelet/x/term v0.2.1
    • github.com/charmbracelet/bubbles v0.21.0 ... github.com/charmbracelet/x/term v0.2.1
    • github.com/charmbracelet/bubbles v0.21.0 github.com/charmbracelet/x/term v0.2.1
    • github.com/charmbracelet/bubbletea v1.3.10 ... github.com/charmbracelet/x/term v0.2.1
    • github.com/charmbracelet/bubbletea v1.3.10 github.com/charmbracelet/x/term v0.2.1
    • github.com/charmbracelet/lipgloss v1.1.0 ... github.com/charmbracelet/x/term v0.2.1
  • github.com/cloudflare/circl v1.6.1 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · BSD-3-Clause

    Paths for github.com/cloudflare/circl v1.6.1

    Paths for github.com/cloudflare/circl v1.6.1
    Showing 7 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/cosign/v2 v2.4.1 ... github.com/cloudflare/circl v1.6.1
    • github.com/go-git/go-git/v5 v5.16.4 ... github.com/cloudflare/circl v1.6.1
    • github.com/go-git/go-git/v5 v5.16.4 github.com/cloudflare/circl v1.6.1
    • github.com/protonmail/go-crypto v1.3.0 github.com/cloudflare/circl v1.6.1
    • github.com/sigstore/gitsign v0.12.0 ... github.com/cloudflare/circl v1.6.1
    • github.com/sigstore/gitsign v0.12.0 github.com/cloudflare/circl v1.6.1
    • github.com/sigstore/cosign/v2 v2.4.1 github.com/cloudflare/circl v1.6.1
  • github.com/containerd/stargz-snapshotter/estargz v0.16.3 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · Apache-2.0

    Paths for github.com/containerd/stargz-snapshotter/estargz v0.16.3

    Paths for github.com/containerd/stargz-snapshotter/estargz v0.16.3
    Showing 6 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/sigstore-go v0.6.2 ... github.com/containerd/stargz-snapshotter/estargz v0.16.3
    • github.com/sigstore/cosign/v2 v2.4.1 ... github.com/containerd/stargz-snapshotter/estargz v0.16.3
    • github.com/sigstore/cosign/v2 v2.4.1 github.com/containerd/stargz-snapshotter/estargz v0.16.3
    • github.com/sigstore/sigstore v1.9.1 ... github.com/containerd/stargz-snapshotter/estargz v0.16.3
    • github.com/sigstore/gitsign v0.12.0 ... github.com/containerd/stargz-snapshotter/estargz v0.16.3
    • github.com/sigstore/gitsign v0.12.0 github.com/containerd/stargz-snapshotter/estargz v0.16.3
  • github.com/coreos/go-oidc/v3 v3.12.0 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · Apache-2.0

    Paths for github.com/coreos/go-oidc/v3 v3.12.0

    Paths for github.com/coreos/go-oidc/v3 v3.12.0
    Showing 7 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/sigstore-go v0.6.2 github.com/coreos/go-oidc/v3 v3.12.0
    • github.com/sigstore/cosign/v2 v2.4.1 ... github.com/coreos/go-oidc/v3 v3.12.0
    • github.com/sigstore/cosign/v2 v2.4.1 github.com/coreos/go-oidc/v3 v3.12.0
    • github.com/sigstore/sigstore v1.9.1 github.com/coreos/go-oidc/v3 v3.12.0
    • github.com/sigstore/gitsign v0.12.0 ... github.com/coreos/go-oidc/v3 v3.12.0
    • github.com/sigstore/gitsign v0.12.0 github.com/coreos/go-oidc/v3 v3.12.0
    • github.com/sigstore/sigstore-go v0.6.2 ... github.com/coreos/go-oidc/v3 v3.12.0
  • github.com/cpuguy83/go-md2man/v2 v2.0.6 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · MIT

    Paths for github.com/cpuguy83/go-md2man/v2 v2.0.6

    Paths for github.com/cpuguy83/go-md2man/v2 v2.0.6
    Showing 7 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/cosign/v2 v2.4.1 github.com/cpuguy83/go-md2man/v2 v2.0.6
    • github.com/sigstore/sigstore v1.9.1 ... github.com/cpuguy83/go-md2man/v2 v2.0.6
    • github.com/spf13/cobra v1.10.2 github.com/cpuguy83/go-md2man/v2 v2.0.6
    • github.com/sigstore/gitsign v0.12.0 ... github.com/cpuguy83/go-md2man/v2 v2.0.6
    • github.com/sigstore/gitsign v0.12.0 github.com/cpuguy83/go-md2man/v2 v2.0.6
    • github.com/sigstore/sigstore-go v0.6.2 ... github.com/cpuguy83/go-md2man/v2 v2.0.6
    • github.com/sigstore/cosign/v2 v2.4.1 ... github.com/cpuguy83/go-md2man/v2 v2.0.6
  • github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · Apache-2.0

    Paths for github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467

    Paths for github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
    Showing 6 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/sigstore-go v0.6.2 github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
    • github.com/sigstore/sigstore-go v0.6.2 ... github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
    • github.com/sigstore/cosign/v2 v2.4.1 ... github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
    • github.com/sigstore/cosign/v2 v2.4.1 github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
    • github.com/sigstore/gitsign v0.12.0 ... github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
    • github.com/sigstore/gitsign v0.12.0 github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
  • github.com/cyphar/filepath-securejoin v0.4.1 Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · BSD-3-Clause

    Paths for github.com/cyphar/filepath-securejoin v0.4.1

    Paths for github.com/cyphar/filepath-securejoin v0.4.1
    Showing 4 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/gitsign v0.12.0 ... github.com/cyphar/filepath-securejoin v0.4.1
    • github.com/sigstore/gitsign v0.12.0 github.com/cyphar/filepath-securejoin v0.4.1
    • github.com/go-git/go-git/v5 v5.16.4 github.com/cyphar/filepath-securejoin v0.4.1
    • github.com/go-git/go-git/v5 v5.16.4 ... github.com/cyphar/filepath-securejoin v0.4.1
  • github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964 Direct
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · BSD-2-Clause

    Paths for github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964

    Paths for github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964
    Showing 0 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive
  • github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc Transitive
    Show dependency options
    Go · go.mod · Detected by dependabot on Dec 15, 2025 · ISC

    Paths for github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc

    Paths for github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    Showing 18 paths. Export SBOM to view all paths. Learn more about SBOMS.

      Transitive

    • github.com/sigstore/sigstore v1.9.1 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/hiddeco/sshsig v0.2.0 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/sigstore/sigstore-go v0.6.2 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/in-toto/attestation v1.1.2 ... github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/secure-systems-lab/go-securesystemslib v0.9.1 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/sigstore/sigstore-go v0.6.2 ... github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/go-git/go-git/v5 v5.16.4 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/secure-systems-lab/go-securesystemslib v0.9.1 ... github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/hiddeco/sshsig v0.2.0 ... github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/sigstore/gitsign v0.12.0 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/sigstore/protobuf-specs v0.5.0 ... github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/sigstore/cosign/v2 v2.4.1 ... github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/sigstore/cosign/v2 v2.4.1 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/in-toto/attestation v1.1.2 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/stretchr/testify v1.11.1 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/sigstore/gitsign v0.12.0 ... github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/go-git/go-git/v5 v5.16.4 ... github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
    • github.com/sigstore/sigstore v1.9.1 ... github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
ProTip! Supported ecosystems will have transitivity labels on their packages.