Lists the data breaches an email address appears in, from Have I Been Pwned: site, date, size, kinds of data
Artifact v0.1.0
- Image
ghcr.io/osintverse-community/hibp-breaches- Digest
sha256:ab2ff543bd33d019cc5431dad42abfec0b89d568d37d170601cc7abb9f6ecc8c- Registry copy
- Mirror image
mirror.otinstaller.com/osintverse-community/hibp-breaches@sha256:ab2ff543bd33d019cc5431dad42abfec0b89d568d37d170601cc7abb9f6ecc8c, same digest.
Signature
- Identity
https://github.com/osintverse-community/hibp-breaches/.github/workflows/otinstaller-release.yml@refs/heads/main- Issuer
https://token.actions.githubusercontent.com
Signed by the repository's own release workflow (cosign keyless, or a PyPI attestation for wheels). ot verifies this identity before every install and refuses a mismatch, including from the registry's mirror.
Scans
Latest run · 24 Oct 2026
- Passed
Malware and secrets
0 malware heuristics, 0 embedded secrets
- Passed
Software bill of materials
95 packages
- Passed
Signature
Signed by https://github.com/osintverse-community/hibp-breaches/.github/workflows/otinstaller-release.yml@refs/heads/main
- Passed
Smoke test
Exit code 3 in 6.1 s, offline sandbox with the manifest's test input
- Passed
Vulnerabilities
0 critical, 44 high, 63 medium, 62 low (0 high or critical with fixes available)
How releases are checked: security model. Found a problem? Email security@otinstaller.com, or report it privately.