Seal Security

EXPERIMENTAL

Scanning results may be inaccurate.

This page describes the details of the Seal Security vulnerability feed. Seal provides security advisories and patched versions for both OS packages and application dependencies.

OS Packages

Seal provides patched versions for multiple Linux distributions, including Debian, Ubuntu, Alpine, Red Hat Enterprise Linux, CentOS, Oracle Linux, and Azure Linux (CBL‑Mariner).

Seal OS package advisories are used when Trivy finds packages that indicate Seal-provided components:

• Packages whose name or source name starts with seal- (for example, seal-wget, seal-zlib).

When such Seal packages are detected, Trivy automatically enables Seal scanning for those packages while continuing to use the base OS scanner for the rest.

Note

For vulnerabilities, Trivy prefers severity from the base OS vendor when available.

For details on supported scanners, features, and behavior for each base OS, refer to their respective pages:

• Debian
• Ubuntu
• Alpine
• Red Hat Enterprise Linux
• CentOS
• Oracle Linux
• Azure Linux (CBL‑Mariner)

Application Dependencies

Seal also provides patched versions of application dependencies with their own vulnerability advisories. Trivy automatically detects Seal-patched packages based on special naming patterns specific to each ecosystem.

Supported Ecosystems

Ecosystem	Package Pattern	Example
Python (pip)	seal-*	seal-requests
Node.js (npm)	@seal-security/*	@seal-security/ejs
Go	sealsecurity.io/*	sealsecurity.io/github.com/Masterminds/goutils
Java (Maven)	seal.sp*	seal.sp1.org.eclipse.jetty:jetty-http
Ruby (RubyGems)	seal-*	seal-rack

When Trivy detects packages matching these patterns, it automatically uses Seal Security advisories for vulnerability scanning.