{"SchemaVersion":2,"Trivy":{"Version":"0.75.0"},"ReportID":"01a1406e-b927-78da-a9ce-f8a7ec4a975f","CreatedAt":"2026-10-15T16:39:20.61558195Z","ArtifactID":"sha256:c3963c7ccd027233a4c966282eede403a1eaf344d38c602d5c1105951023d246","ArtifactName":"build/payload/blackbox-exporter-v0.29.0-tpio.1","ArtifactType":"container_image","Metadata":{"Size":24774144,"ImageID":"sha256:c3963c7ccd027233a4c966282eede403a1eaf344d38c602d5c1105951023d246","DiffIDs":["sha256:3b44c9d707fee2721ec7f0be6b993e4c028dc84142bc05dcee50395ef9d771eb","sha256:a5565b9a155d2ae96686ef8de70512446703895a85dd95b07d69b23f2f3438b5","sha256:1b31432e0b5af361473f7d2088afe298f6ead89049faeb74076ca2ee37aeb919","sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146","sha256:2c94243304c8d2fcc6faeaa3a416994273fd218ac23ddf9af66b951b47a81b8f","sha256:49ab2942c8292eb5108460e6198ef297bdf8c66e1f9fe78e6162937b231b92c1"],"ImageConfig":{"architecture":"amd64","created":"2026-10-13T02:06:15.306201404Z","history":[{"created":"2026-10-13T02:01:27.90290404Z","created_by":"/bin/sh -c #(nop) COPY file:100024e02be1df79e71969c23f78faff621cc50c4e7e488b7b14a9d510f74097 in /etc/ssl/certs/ca-certificates.crt      "},{"created":"2026-10-13T02:01:29.000408949Z","created_by":"/bin/sh -c #(nop) COPY multi:2a625bdb88e680378402851a288ffacd9798715bc5afd9c024c05c1515d6fb5c in /etc/      "},{"created":"2026-10-13T02:06:10.000184218Z","created_by":"/bin/sh -c #(nop) COPY file:ed2a180de88c697614c408917935dd82fe75e9f3ab354a51feff014a82392cc2 in /etc/blackbox_exporter/config.yml      "},{"created":"2026-10-13T02:06:11.000733222Z","created_by":"/bin/sh -c #(nop) COPY file:c524af841a4f9ebbaf4c0f5eea4cad24f34fe34399a99cf33828d6ffff2070d5 in /bin/blackbox_exporter      "},{"created":"2026-10-13T02:06:12.00027691Z","created_by":"/bin/sh -c #(nop) COPY multi:f5cb9f0947701d2ec658df7e16c107ee61eb9ff6767ff758761c6170fe407172 in /usr/share/tp-hardened/blackbox-exporter/      "},{"created":"2026-10-13T02:06:13.000938573Z","created_by":"/bin/sh -c #(nop) COPY dir:14902bf69a2587c8d03a36a2440973743851ec8826e0a0c5daccf3419ccd0213 in /usr/share/tp-hardened/blackbox-exporter/licenses/      "},{"created":"2026-10-13T02:06:13.364706083Z","created_by":"/bin/sh -c #(nop) USER 65534:65534","empty_layer":true},{"created":"2026-10-13T02:06:13.599872556Z","created_by":"/bin/sh -c #(nop) EXPOSE 9115","empty_layer":true},{"created":"2026-10-13T02:06:13.802539769Z","created_by":"/bin/sh -c #(nop) ENTRYPOINT [\"/bin/blackbox_exporter\"]","empty_layer":true},{"created":"2026-10-13T02:06:14.227426803Z","created_by":"/bin/sh -c #(nop) CMD [\"--config.file=/etc/blackbox_exporter/config.yml\"]","empty_layer":true},{"created":"2026-10-13T02:06:15.30646749Z","created_by":"/bin/sh -c #(nop) LABEL org.opencontainers.image.version=\"v0.29.0\"       org.opencontainers.image.source=\"https://github.com/prometheus/blackbox_exporter\"       org.opencontainers.image.revision=\"0e64fec9b041487cc3b62245a8ed5afb0d22819c\"       io.thepeoples.hardened.upstream=\"quay.io/prometheus/blackbox-exporter:v0.29.0@sha256:9613f2884689b6fad9f1939f6a3b0388c93a022cfaededb19545b329b5c83dea\"       io.thepeoples.hardened.ladder=\"b+minimize\"       io.thepeoples.hardened.toolchain=\"go1.27.2\"       io.thepeoples.hardened.source-status=\"export vendor and base sources before publication\"","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:3b44c9d707fee2721ec7f0be6b993e4c028dc84142bc05dcee50395ef9d771eb","sha256:a5565b9a155d2ae96686ef8de70512446703895a85dd95b07d69b23f2f3438b5","sha256:1b31432e0b5af361473f7d2088afe298f6ead89049faeb74076ca2ee37aeb919","sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146","sha256:2c94243304c8d2fcc6faeaa3a416994273fd218ac23ddf9af66b951b47a81b8f","sha256:49ab2942c8292eb5108460e6198ef297bdf8c66e1f9fe78e6162937b231b92c1"]},"config":{"Cmd":["--config.file=/etc/blackbox_exporter/config.yml"],"Entrypoint":["/bin/blackbox_exporter"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Labels":{"io.buildah.version":"1.43.1","io.thepeoples.hardened.ladder":"b+minimize","io.thepeoples.hardened.source-status":"export vendor and base sources before publication","io.thepeoples.hardened.toolchain":"go1.27.2","io.thepeoples.hardened.upstream":"quay.io/prometheus/blackbox-exporter:v0.29.0@sha256:9613f2884689b6fad9f1939f6a3b0388c93a022cfaededb19545b329b5c83dea","org.opencontainers.image.revision":"0e64fec9b041487cc3b62245a8ed5afb0d22819c","org.opencontainers.image.source":"https://github.com/prometheus/blackbox_exporter","org.opencontainers.image.version":"v0.29.0"},"User":"65534:65534","WorkingDir":"/","ExposedPorts":{"9115/tcp":{}}}},"Layers":[{"Size":227840,"Digest":"sha256:6d0db8bc250e099aa462d3a0ea5b17f3ce73d2ef6e7659e19f1f7a782541eae1","DiffID":"sha256:3b44c9d707fee2721ec7f0be6b993e4c028dc84142bc05dcee50395ef9d771eb"},{"Size":4608,"Digest":"sha256:63caa5eca82dd975fde53f925ef271fc542f1b8bed93ba06e4bd46e22d340664","DiffID":"sha256:a5565b9a155d2ae96686ef8de70512446703895a85dd95b07d69b23f2f3438b5"},{"Size":4608,"Digest":"sha256:8b289d4a87425f06eecb285aaa7f6138904f7d1d3f97caba81dd4af0a94a5039","DiffID":"sha256:1b31432e0b5af361473f7d2088afe298f6ead89049faeb74076ca2ee37aeb919"},{"Size":24484352,"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},{"Size":35840,"Digest":"sha256:4b8b8599669c216cd024c767cf47e3d91ba534c005527b8cdc8fa82a689c0597","DiffID":"sha256:2c94243304c8d2fcc6faeaa3a416994273fd218ac23ddf9af66b951b47a81b8f"},{"Size":16896,"Digest":"sha256:0c54d5901038b88d584c033fbf611a9bec601ac9fe69b53c4b1e97cddf79ec65","DiffID":"sha256:49ab2942c8292eb5108460e6198ef297bdf8c66e1f9fe78e6162937b231b92c1"}]},"Results":[{"Target":"bin/blackbox_exporter","Class":"lang-pkgs","Type":"gobinary","Packages":[{"ID":"github.com/prometheus/blackbox_exporter","Name":"github.com/prometheus/blackbox_exporter","Identifier":{"PURL":"pkg:golang/github.com/prometheus/blackbox_exporter","UID":"287812620890e57b"},"Relationship":"root","DependsOn":["cel.dev/expr@v0.25.2","github.com/alecthomas/kingpin/v2@v2.4.0","github.com/alecthomas/units@v0.0.0-20240927000941-0f3dac36c52b","github.com/andybalholm/brotli@v1.2.5","github.com/antlr4-go/antlr/v4@v4.13.1","github.com/beorn7/perks@v1.0.1","github.com/cespare/xxhash/v2@v2.3.0","github.com/coreos/go-systemd/v22@v22.7.0","github.com/golang-jwt/jwt/v5@v5.3.1","github.com/google/cel-go@v0.30.0","github.com/google/uuid@v1.6.0","github.com/gorilla/websocket@v1.5.3","github.com/jpillora/backoff@v1.0.0","github.com/mdlayher/socket@v0.6.0","github.com/mdlayher/vsock@v1.3.0","github.com/miekg/dns@v1.1.73","github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","github.com/mwitkow/go-conntrack@v0.0.0-20190716064945-2f068394615f","github.com/prometheus/client_golang@v1.24.1","github.com/prometheus/client_model@v0.6.3","github.com/prometheus/common@v0.72.0","github.com/prometheus/exporter-toolkit@v0.20.0","github.com/prometheus/procfs@v0.21.1","github.com/quic-go/qpack@v0.6.0","github.com/quic-go/quic-go@v0.63.0","github.com/xhit/go-str2duration/v2@v2.1.0","go.yaml.in/yaml/v2@v2.4.4","go.yaml.in/yaml/v3@v3.0.5","golang.org/x/crypto@v0.57.0","golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948","golang.org/x/net@v0.60.0","golang.org/x/oauth2@v0.37.0","golang.org/x/sync@v0.23.0","golang.org/x/sys@v0.48.0","golang.org/x/text@v0.42.0","golang.org/x/time@v0.15.0","google.golang.org/genproto/googleapis/api@v0.0.0-20260706201446-f0a921348800","google.golang.org/genproto/googleapis/rpc@v0.0.0-20260706201446-f0a921348800","google.golang.org/grpc@v1.84.0","google.golang.org/protobuf@v1.36.12","stdlib@v1.27.2"],"Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"stdlib@v1.27.2","Name":"stdlib","Identifier":{"PURL":"pkg:golang/stdlib@v1.27.2","UID":"91b1bdee419b67f0"},"Version":"v1.27.2","Relationship":"direct","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"cel.dev/expr@v0.25.2","Name":"cel.dev/expr","Identifier":{"PURL":"pkg:golang/cel.dev/expr@v0.25.2","UID":"bed2d25039cd1ca9"},"Version":"v0.25.2","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/alecthomas/kingpin/v2@v2.4.0","Name":"github.com/alecthomas/kingpin/v2","Identifier":{"PURL":"pkg:golang/github.com/alecthomas/kingpin/v2@v2.4.0","UID":"bf5c310a5f0aee79"},"Version":"v2.4.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/alecthomas/units@v0.0.0-20240927000941-0f3dac36c52b","Name":"github.com/alecthomas/units","Identifier":{"PURL":"pkg:golang/github.com/alecthomas/units@v0.0.0-20240927000941-0f3dac36c52b","UID":"3db6a8c81f2f5175"},"Version":"v0.0.0-20240927000941-0f3dac36c52b","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/andybalholm/brotli@v1.2.5","Name":"github.com/andybalholm/brotli","Identifier":{"PURL":"pkg:golang/github.com/andybalholm/brotli@v1.2.5","UID":"719a005f84030302"},"Version":"v1.2.5","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/antlr4-go/antlr/v4@v4.13.1","Name":"github.com/antlr4-go/antlr/v4","Identifier":{"PURL":"pkg:golang/github.com/antlr4-go/antlr/v4@v4.13.1","UID":"4d36e0f8c154e928"},"Version":"v4.13.1","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/beorn7/perks@v1.0.1","Name":"github.com/beorn7/perks","Identifier":{"PURL":"pkg:golang/github.com/beorn7/perks@v1.0.1","UID":"f618965228f62a09"},"Version":"v1.0.1","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/cespare/xxhash/v2@v2.3.0","Name":"github.com/cespare/xxhash/v2","Identifier":{"PURL":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","UID":"abac8549ac56375c"},"Version":"v2.3.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/coreos/go-systemd/v22@v22.7.0","Name":"github.com/coreos/go-systemd/v22","Identifier":{"PURL":"pkg:golang/github.com/coreos/go-systemd/v22@v22.7.0","UID":"2a07a89e769aa2a8"},"Version":"v22.7.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/golang-jwt/jwt/v5@v5.3.1","Name":"github.com/golang-jwt/jwt/v5","Identifier":{"PURL":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1","UID":"aae0f97b33606ae0"},"Version":"v5.3.1","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/google/cel-go@v0.30.0","Name":"github.com/google/cel-go","Identifier":{"PURL":"pkg:golang/github.com/google/cel-go@v0.30.0","UID":"4a3a965cf360d3ac"},"Version":"v0.30.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/google/uuid@v1.6.0","Name":"github.com/google/uuid","Identifier":{"PURL":"pkg:golang/github.com/google/uuid@v1.6.0","UID":"40736374345e638f"},"Version":"v1.6.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/gorilla/websocket@v1.5.3","Name":"github.com/gorilla/websocket","Identifier":{"PURL":"pkg:golang/github.com/gorilla/websocket@v1.5.3","UID":"eee229cf9bd04fd9"},"Version":"v1.5.3","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/jpillora/backoff@v1.0.0","Name":"github.com/jpillora/backoff","Identifier":{"PURL":"pkg:golang/github.com/jpillora/backoff@v1.0.0","UID":"38d60ee8a57351c7"},"Version":"v1.0.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/mdlayher/socket@v0.6.0","Name":"github.com/mdlayher/socket","Identifier":{"PURL":"pkg:golang/github.com/mdlayher/socket@v0.6.0","UID":"8786c2c98dcd436f"},"Version":"v0.6.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/mdlayher/vsock@v1.3.0","Name":"github.com/mdlayher/vsock","Identifier":{"PURL":"pkg:golang/github.com/mdlayher/vsock@v1.3.0","UID":"4f8ad1e6c0ef847c"},"Version":"v1.3.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/miekg/dns@v1.1.73","Name":"github.com/miekg/dns","Identifier":{"PURL":"pkg:golang/github.com/miekg/dns@v1.1.73","UID":"2ebfd75bc1ffdbc5"},"Version":"v1.1.73","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","Name":"github.com/munnerz/goautoneg","Identifier":{"PURL":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","UID":"71568ae21be929c9"},"Version":"v0.0.0-20191010083416-a7dc8b61c822","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/mwitkow/go-conntrack@v0.0.0-20190716064945-2f068394615f","Name":"github.com/mwitkow/go-conntrack","Identifier":{"PURL":"pkg:golang/github.com/mwitkow/go-conntrack@v0.0.0-20190716064945-2f068394615f","UID":"760aca32a9f827c0"},"Version":"v0.0.0-20190716064945-2f068394615f","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/client_golang@v1.24.1","Name":"github.com/prometheus/client_golang","Identifier":{"PURL":"pkg:golang/github.com/prometheus/client_golang@v1.24.1","UID":"c88456482e932304"},"Version":"v1.24.1","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/client_model@v0.6.3","Name":"github.com/prometheus/client_model","Identifier":{"PURL":"pkg:golang/github.com/prometheus/client_model@v0.6.3","UID":"feaa7460c92ca64"},"Version":"v0.6.3","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/common@v0.72.0","Name":"github.com/prometheus/common","Identifier":{"PURL":"pkg:golang/github.com/prometheus/common@v0.72.0","UID":"61cfe85e8b050a8b"},"Version":"v0.72.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/exporter-toolkit@v0.20.0","Name":"github.com/prometheus/exporter-toolkit","Identifier":{"PURL":"pkg:golang/github.com/prometheus/exporter-toolkit@v0.20.0","UID":"7f0d09879c716832"},"Version":"v0.20.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/procfs@v0.21.1","Name":"github.com/prometheus/procfs","Identifier":{"PURL":"pkg:golang/github.com/prometheus/procfs@v0.21.1","UID":"b88182c5936f37e1"},"Version":"v0.21.1","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/quic-go/qpack@v0.6.0","Name":"github.com/quic-go/qpack","Identifier":{"PURL":"pkg:golang/github.com/quic-go/qpack@v0.6.0","UID":"d6d3eeb82ae279bd"},"Version":"v0.6.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/quic-go/quic-go@v0.63.0","Name":"github.com/quic-go/quic-go","Identifier":{"PURL":"pkg:golang/github.com/quic-go/quic-go@v0.63.0","UID":"5b972cb6a41d0af9"},"Version":"v0.63.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"github.com/xhit/go-str2duration/v2@v2.1.0","Name":"github.com/xhit/go-str2duration/v2","Identifier":{"PURL":"pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0","UID":"e2bce48317bf68e7"},"Version":"v2.1.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"go.yaml.in/yaml/v2@v2.4.4","Name":"go.yaml.in/yaml/v2","Identifier":{"PURL":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4","UID":"721d598fadb1bf64"},"Version":"v2.4.4","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"go.yaml.in/yaml/v3@v3.0.5","Name":"go.yaml.in/yaml/v3","Identifier":{"PURL":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5","UID":"8707a9a6dca61a65"},"Version":"v3.0.5","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/crypto@v0.57.0","Name":"golang.org/x/crypto","Identifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.57.0","UID":"48a1f199cbdf7a2"},"Version":"v0.57.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948","Name":"golang.org/x/exp","Identifier":{"PURL":"pkg:golang/golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948","UID":"488e6bcfded45342"},"Version":"v0.0.0-20240823005443-9b4947da3948","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/net@v0.60.0","Name":"golang.org/x/net","Identifier":{"PURL":"pkg:golang/golang.org/x/net@v0.60.0","UID":"51c1683403bb15cb"},"Version":"v0.60.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/oauth2@v0.37.0","Name":"golang.org/x/oauth2","Identifier":{"PURL":"pkg:golang/golang.org/x/oauth2@v0.37.0","UID":"dcde37fc13c145c0"},"Version":"v0.37.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/sync@v0.23.0","Name":"golang.org/x/sync","Identifier":{"PURL":"pkg:golang/golang.org/x/sync@v0.23.0","UID":"f1c0416be0ed27ee"},"Version":"v0.23.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/sys@v0.48.0","Name":"golang.org/x/sys","Identifier":{"PURL":"pkg:golang/golang.org/x/sys@v0.48.0","UID":"c749ba5d4953b922"},"Version":"v0.48.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/text@v0.42.0","Name":"golang.org/x/text","Identifier":{"PURL":"pkg:golang/golang.org/x/text@v0.42.0","UID":"d2750948e56eff3f"},"Version":"v0.42.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/time@v0.15.0","Name":"golang.org/x/time","Identifier":{"PURL":"pkg:golang/golang.org/x/time@v0.15.0","UID":"5f4a787c064d1356"},"Version":"v0.15.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"google.golang.org/genproto/googleapis/api@v0.0.0-20260706201446-f0a921348800","Name":"google.golang.org/genproto/googleapis/api","Identifier":{"PURL":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260706201446-f0a921348800","UID":"291ef50147b96ee8"},"Version":"v0.0.0-20260706201446-f0a921348800","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"google.golang.org/genproto/googleapis/rpc@v0.0.0-20260706201446-f0a921348800","Name":"google.golang.org/genproto/googleapis/rpc","Identifier":{"PURL":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260706201446-f0a921348800","UID":"e9f9ee51dd6058a5"},"Version":"v0.0.0-20260706201446-f0a921348800","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"google.golang.org/grpc@v1.84.0","Name":"google.golang.org/grpc","Identifier":{"PURL":"pkg:golang/google.golang.org/grpc@v1.84.0","UID":"e4bb9b84bd5ad12"},"Version":"v1.84.0","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"},{"ID":"google.golang.org/protobuf@v1.36.12","Name":"google.golang.org/protobuf","Identifier":{"PURL":"pkg:golang/google.golang.org/protobuf@v1.36.12","UID":"26b3983a1d3ec5d2"},"Version":"v1.36.12","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"AnalyzedBy":"gobinary"}],"Vulnerabilities":[{"VulnerabilityID":"GO-2026-5932","PkgID":"golang.org/x/crypto@v0.57.0","PkgName":"golang.org/x/crypto","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.57.0","UID":"48a1f199cbdf7a2"},"InstalledVersion":"v0.57.0","Status":"affected","Layer":{"Digest":"sha256:eb36b60d8a2348f9e49a135114b6faa195e0bfd9e7600d3f890764bbb7acfd49","DiffID":"sha256:d2c9528bc2d2e68f1f65426ddabe427e92c1c23b2bb576214343be887081a146"},"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Fingerprint":"sha256:3f18b3fabd43595cba76c78b3faf3e6685387c1e971be414915aa922119ffa82","Title":"The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues","Description":"The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.\n\nIf you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.","Severity":"UNKNOWN","References":["https://go.dev/issue/44226","https://pkg.go.dev/vuln/GO-2026-5932"]}]}]}