Ballerina Security

Dashboard

Security Packages Status

This section demonstrates the current status of the security-specific packages of the Ballerina Platform. All of these repositories are categorized under the Ballerina Standard Library packages.

Package	Latest Release	Package Status	Test Status	Bugs	Open PRs	API Docs & Package
auth
jwt
oauth2
crypto
url

Release Compatibility Status

This section demonstrates the current status of the Ballerina programs that are executed against the latest (pre-release/release) Ballerina version which is configurable with individual GitHub actions. Mostly, these actions are used to test the compatibility of existing programs during the RC period of a release.

Trivy Scan Status

2201.x.x (Swan Lake)

This section demonstrates the daily Trivy scan status of the master branch (which is used for 2201.x.x latest release) of the packages. These GitHub actions are used to proactively identify the vulnerabilities of the 3rd party dependencies used for a package.

Modules	Trivy	Standard Library Modules	Trivy
ballerina-lang		io
openapi-tools		jballerina.java.arrays
asyncapi-tools		regex
graphql-tools		time
observe		url
observei		xmldata
transactioni		crypto
datamapper		log
c2c		os
docker		protobuf
aws.lambda		random
azure.functions		task
choreo		xslt
jaeger		cache
prometheus		file
ballerina-distribution		ftp
ballerina-dev-website		mime
		tcp
		udp
		uuid
		auth
		jwt
		oauth2
		email
		http
		grpc
		websocket
		websub
		websubhub
		graphql
		sql
		java.jdbc
		mssql
		mysql
		oracledb
		postgresql
		kafka
		nats
		stan
		rabbitmq

1.2.x

This section demonstrates the daily Trivy scan status of the ballerina-1.2.x branch (which is used for 1.2.x release) of the packages. These GitHub actions are used to proactively identify the vulnerabilities of the 3rd party dependencies used for a package.

Module	Trivy
ballerina-lang
aws.lambda
azure.functions
docker
kubernetes
ballerina-distribution