{"SchemaVersion":2,"Trivy":{"Version":"0.75.0"},"ReportID":"01a1578f-1173-7201-9d63-380db6717e81","CreatedAt":"2026-10-20T04:25:56.339133803Z","ArtifactID":"sha256:24c1abba8ea8fb297324c970bdb0fe7cf8330b93b69e6e1c7a04986f8ab3a0b3","ArtifactName":"build/payload/oauth2-proxy-v7.15.5-tpio.1","ArtifactType":"container_image","Metadata":{"Size":30540288,"ImageID":"sha256:24c1abba8ea8fb297324c970bdb0fe7cf8330b93b69e6e1c7a04986f8ab3a0b3","DiffIDs":["sha256:b241faad2d8a20e863fd2c80dd97a85ea1ed12897959d21d143692f733f996a6","sha256:96733ca5a75423e7992d873cbabc3259a637b0a601441b3952695de6846a3f4e","sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c","sha256:e5e1520c68bdf9114738e347d6575686d3b5e790159c992d983634ba51f1ed30"],"ImageConfig":{"architecture":"amd64","created":"2026-10-20T01:03:21.321013912Z","history":[{"created":"2026-10-20T01:03:16.701299995Z","created_by":"/bin/sh -c #(nop) ARG GO_IMAGE","empty_layer":true},{"created":"2026-10-20T01:03:17.124848073Z","created_by":"/bin/sh -c #(nop) COPY dir:d3e7bd11dc8c7b63a5e29360ba81f7da8f013719b88efb7e71c7c8f00ad5b4c2 in /      "},{"created":"2026-10-20T01:03:18.00048905Z","created_by":"/bin/sh -c #(nop) COPY file:1af288bbd4686792413d89889328f3cb1c24df2b8ce5b1979abc2daa7c8a25fd in /etc/ssl/certs/ca-certificates.crt      "},{"created":"2026-10-20T01:03:19.000959464Z","created_by":"/bin/sh -c #(nop) COPY file:7ca8c9b8142bcedc7cb84f418af6e196d4a0e1b8361b2775c5f75aecc97a5e9a in /bin/oauth2-proxy      "},{"created":"2026-10-20T01:03:20.003370569Z","created_by":"/bin/sh -c #(nop) COPY dir:8180515b0a241c86496caf2acde4f566a63a61ccff0ca35554816eaa8fb0caa9 in /usr/share/tp-hardened/oauth2-proxy/      "},{"created":"2026-10-20T01:03:20.452716768Z","created_by":"/bin/sh -c #(nop) USER 65532:65532","empty_layer":true},{"created":"2026-10-20T01:03:20.673023186Z","created_by":"/bin/sh -c #(nop) WORKDIR /","empty_layer":true},{"created":"2026-10-20T01:03:20.876913127Z","created_by":"/bin/sh -c #(nop) EXPOSE 4180 44180","empty_layer":true},{"created":"2026-10-20T01:03:21.1207208Z","created_by":"/bin/sh -c #(nop) ENTRYPOINT [\"/bin/oauth2-proxy\"]","empty_layer":true},{"created":"2026-10-20T01:03:21.321199479Z","created_by":"/bin/sh -c #(nop) LABEL org.opencontainers.image.version=\"v7.15.5\"       org.opencontainers.image.source=\"https://github.com/oauth2-proxy/oauth2-proxy\"       org.opencontainers.image.revision=\"bea3f04bf87b93f5354f392fe2216a88e6031350\"       org.opencontainers.image.licenses=\"MIT\"       io.thepeoples.hardened.upstream=\"quay.io/oauth2-proxy/oauth2-proxy:v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916\"       io.thepeoples.hardened.ladder=\"b+minimize\"       io.thepeoples.hardened.toolchain=\"${GO_IMAGE}\"       io.thepeoples.hardened.source-status=\"upstream release tarball plus this Containerfile and recorded module changes\"","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:b241faad2d8a20e863fd2c80dd97a85ea1ed12897959d21d143692f733f996a6","sha256:96733ca5a75423e7992d873cbabc3259a637b0a601441b3952695de6846a3f4e","sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c","sha256:e5e1520c68bdf9114738e347d6575686d3b5e790159c992d983634ba51f1ed30"]},"config":{"Entrypoint":["/bin/oauth2-proxy"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Labels":{"io.buildah.version":"1.43.1","io.thepeoples.hardened.ladder":"b+minimize","io.thepeoples.hardened.source-status":"upstream release tarball plus this Containerfile and recorded module changes","io.thepeoples.hardened.toolchain":"docker.io/library/golang:1.27.2-alpine3.24@sha256:f92b6ef800e499660581efdabdf25d9d817a9d124eaf900924f0504e7e27e12d","io.thepeoples.hardened.upstream":"quay.io/oauth2-proxy/oauth2-proxy:v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916","org.opencontainers.image.licenses":"MIT","org.opencontainers.image.revision":"bea3f04bf87b93f5354f392fe2216a88e6031350","org.opencontainers.image.source":"https://github.com/oauth2-proxy/oauth2-proxy","org.opencontainers.image.version":"v7.15.5"},"User":"65532:65532","WorkingDir":"/","ExposedPorts":{"4180/tcp":{},"44180/tcp":{}}}},"Layers":[{"Size":5632,"Digest":"sha256:d3c5a6de1f52ff131c8238031a5bf0def35928b6564e9985c8881035eebb5179","DiffID":"sha256:b241faad2d8a20e863fd2c80dd97a85ea1ed12897959d21d143692f733f996a6"},{"Size":184832,"Digest":"sha256:5998c2030cec6a82e922ff6a6667c1d2ddd60761ab4dd968246e90cb31a89c21","DiffID":"sha256:96733ca5a75423e7992d873cbabc3259a637b0a601441b3952695de6846a3f4e"},{"Size":30259712,"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},{"Size":90112,"Digest":"sha256:041574daf7c9bb0dd7891227754cbb5b170dd88cc544c59d686fdbda1b07bdf5","DiffID":"sha256:e5e1520c68bdf9114738e347d6575686d3b5e790159c992d983634ba51f1ed30"}]},"Results":[{"Target":"bin/oauth2-proxy","Class":"lang-pkgs","Type":"gobinary","Packages":[{"ID":"github.com/oauth2-proxy/oauth2-proxy/v7","Name":"github.com/oauth2-proxy/oauth2-proxy/v7","Identifier":{"PURL":"pkg:golang/github.com/oauth2-proxy/oauth2-proxy/v7","UID":"1fe11966b7252a07"},"Relationship":"root","DependsOn":["cloud.google.com/go/auth/oauth2adapt@v0.2.8","cloud.google.com/go/auth@v0.23.3","cloud.google.com/go/compute/metadata@v0.10.0","github.com/a8m/envsubst@v1.4.3","github.com/beorn7/perks@v1.0.1","github.com/bitly/go-simplejson@v0.5.1","github.com/bsm/redislock@v0.10.0","github.com/cespare/xxhash/v2@v2.3.0","github.com/coreos/go-oidc/v3@v3.21.0","github.com/coreos/go-systemd@v0.0.0-20191104093116-d3cd4ed1dbcf","github.com/felixge/httpsnoop@v1.1.0","github.com/fsnotify/fsnotify@v1.10.1","github.com/go-jose/go-jose/v3@v3.0.5","github.com/go-jose/go-jose/v4@v4.1.5","github.com/go-logr/logr@v1.4.4","github.com/go-logr/stdr@v1.2.2","github.com/go-viper/mapstructure/v2@v2.5.0","github.com/golang-jwt/jwt/v5@v5.3.1","github.com/google/s2a-go@v0.1.10","github.com/google/uuid@v1.6.0","github.com/googleapis/enterprise-certificate-proxy@v0.3.22","github.com/googleapis/gax-go/v2@v2.24.1","github.com/gorilla/mux@v1.8.1","github.com/justinas/alice@v1.2.0","github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","github.com/pelletier/go-toml/v2@v2.4.3","github.com/pierrec/lz4/v4@v4.1.31","github.com/prometheus/client_golang@v1.24.1","github.com/prometheus/client_model@v0.6.2","github.com/prometheus/common@v0.70.1","github.com/prometheus/procfs@v0.21.1","github.com/redis/go-redis/v9@v9.22.0","github.com/sagikazarmark/locafero@v0.12.0","github.com/spf13/afero@v1.15.0","github.com/spf13/cast@v1.10.0","github.com/spf13/pflag@v1.0.10","github.com/spf13/viper@v1.21.0","github.com/subosito/gotenv@v1.6.0","github.com/vmihailenco/msgpack/v5@v5.4.1","github.com/vmihailenco/tagparser/v2@v2.0.0","go.opentelemetry.io/auto/sdk@v1.2.1","go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0","go.opentelemetry.io/otel/metric@v1.45.0","go.opentelemetry.io/otel/trace@v1.45.0","go.opentelemetry.io/otel@v1.45.0","go.uber.org/atomic@v1.11.0","go.yaml.in/yaml/v3@v3.0.5","golang.org/x/crypto@v0.57.0","golang.org/x/net@v0.60.0","golang.org/x/oauth2@v0.37.0","golang.org/x/sync@v0.23.0","golang.org/x/sys@v0.48.0","golang.org/x/text@v0.42.0","google.golang.org/api@v0.299.0","google.golang.org/genproto/googleapis/rpc@v0.0.0-20260921155816-b14227669459","google.golang.org/grpc@v1.84.0","google.golang.org/protobuf@v1.36.12","gopkg.in/natefinch/lumberjack.v2@v2.2.1","stdlib@v1.27.2"],"Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"stdlib@v1.27.2","Name":"stdlib","Identifier":{"PURL":"pkg:golang/stdlib@v1.27.2","UID":"4b2e2336b77b6f24"},"Version":"v1.27.2","Relationship":"direct","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"cloud.google.com/go/auth@v0.23.3","Name":"cloud.google.com/go/auth","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/auth@v0.23.3","UID":"512a21278bd781d9"},"Version":"v0.23.3","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"cloud.google.com/go/auth/oauth2adapt@v0.2.8","Name":"cloud.google.com/go/auth/oauth2adapt","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8","UID":"1e75e96ba494969b"},"Version":"v0.2.8","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"cloud.google.com/go/compute/metadata@v0.10.0","Name":"cloud.google.com/go/compute/metadata","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0","UID":"db4fd0168e192309"},"Version":"v0.10.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/a8m/envsubst@v1.4.3","Name":"github.com/a8m/envsubst","Identifier":{"PURL":"pkg:golang/github.com/a8m/envsubst@v1.4.3","UID":"bccb0dadf312166f"},"Version":"v1.4.3","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/beorn7/perks@v1.0.1","Name":"github.com/beorn7/perks","Identifier":{"PURL":"pkg:golang/github.com/beorn7/perks@v1.0.1","UID":"f7439449f8349efd"},"Version":"v1.0.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/bitly/go-simplejson@v0.5.1","Name":"github.com/bitly/go-simplejson","Identifier":{"PURL":"pkg:golang/github.com/bitly/go-simplejson@v0.5.1","UID":"a64b0ae55113e8c5"},"Version":"v0.5.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/bsm/redislock@v0.10.0","Name":"github.com/bsm/redislock","Identifier":{"PURL":"pkg:golang/github.com/bsm/redislock@v0.10.0","UID":"135727f6e9d93759"},"Version":"v0.10.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/cespare/xxhash/v2@v2.3.0","Name":"github.com/cespare/xxhash/v2","Identifier":{"PURL":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","UID":"50b4f69b3c2f10cc"},"Version":"v2.3.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/coreos/go-oidc/v3@v3.21.0","Name":"github.com/coreos/go-oidc/v3","Identifier":{"PURL":"pkg:golang/github.com/coreos/go-oidc/v3@v3.21.0","UID":"55f48eb0a5a44747"},"Version":"v3.21.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/coreos/go-systemd@v0.0.0-20191104093116-d3cd4ed1dbcf","Name":"github.com/coreos/go-systemd","Identifier":{"PURL":"pkg:golang/github.com/coreos/go-systemd@v0.0.0-20191104093116-d3cd4ed1dbcf","UID":"8f84464c4ea692ac"},"Version":"v0.0.0-20191104093116-d3cd4ed1dbcf","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/felixge/httpsnoop@v1.1.0","Name":"github.com/felixge/httpsnoop","Identifier":{"PURL":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","UID":"1785169b5349ec5d"},"Version":"v1.1.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/fsnotify/fsnotify@v1.10.1","Name":"github.com/fsnotify/fsnotify","Identifier":{"PURL":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1","UID":"6cb804728b07d964"},"Version":"v1.10.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/go-jose/go-jose/v3@v3.0.5","Name":"github.com/go-jose/go-jose/v3","Identifier":{"PURL":"pkg:golang/github.com/go-jose/go-jose/v3@v3.0.5","UID":"17c5bea1f995bb1"},"Version":"v3.0.5","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/go-jose/go-jose/v4@v4.1.5","Name":"github.com/go-jose/go-jose/v4","Identifier":{"PURL":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.5","UID":"cd6cefe255de3697"},"Version":"v4.1.5","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/go-logr/logr@v1.4.4","Name":"github.com/go-logr/logr","Identifier":{"PURL":"pkg:golang/github.com/go-logr/logr@v1.4.4","UID":"bf992de6d5c6dfff"},"Version":"v1.4.4","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/go-logr/stdr@v1.2.2","Name":"github.com/go-logr/stdr","Identifier":{"PURL":"pkg:golang/github.com/go-logr/stdr@v1.2.2","UID":"2b834050ab7502f9"},"Version":"v1.2.2","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/go-viper/mapstructure/v2@v2.5.0","Name":"github.com/go-viper/mapstructure/v2","Identifier":{"PURL":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0","UID":"db9c1fc02fa8b454"},"Version":"v2.5.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/golang-jwt/jwt/v5@v5.3.1","Name":"github.com/golang-jwt/jwt/v5","Identifier":{"PURL":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1","UID":"c069f79243352994"},"Version":"v5.3.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/google/s2a-go@v0.1.10","Name":"github.com/google/s2a-go","Identifier":{"PURL":"pkg:golang/github.com/google/s2a-go@v0.1.10","UID":"a137dc4ce337e7f5"},"Version":"v0.1.10","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/google/uuid@v1.6.0","Name":"github.com/google/uuid","Identifier":{"PURL":"pkg:golang/github.com/google/uuid@v1.6.0","UID":"9b5afd68cbce743"},"Version":"v1.6.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/googleapis/enterprise-certificate-proxy@v0.3.22","Name":"github.com/googleapis/enterprise-certificate-proxy","Identifier":{"PURL":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22","UID":"a6147c342da4fe85"},"Version":"v0.3.22","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/googleapis/gax-go/v2@v2.24.1","Name":"github.com/googleapis/gax-go/v2","Identifier":{"PURL":"pkg:golang/github.com/googleapis/gax-go/v2@v2.24.1","UID":"6882a539c7313e05"},"Version":"v2.24.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/gorilla/mux@v1.8.1","Name":"github.com/gorilla/mux","Identifier":{"PURL":"pkg:golang/github.com/gorilla/mux@v1.8.1","UID":"9ced14d1a0925e08"},"Version":"v1.8.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/justinas/alice@v1.2.0","Name":"github.com/justinas/alice","Identifier":{"PURL":"pkg:golang/github.com/justinas/alice@v1.2.0","UID":"e48ec7e1edca8e01"},"Version":"v1.2.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","Name":"github.com/munnerz/goautoneg","Identifier":{"PURL":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","UID":"75752226a9deba49"},"Version":"v0.0.0-20191010083416-a7dc8b61c822","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/pelletier/go-toml/v2@v2.4.3","Name":"github.com/pelletier/go-toml/v2","Identifier":{"PURL":"pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3","UID":"ead495d8dfd2abdc"},"Version":"v2.4.3","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/pierrec/lz4/v4@v4.1.31","Name":"github.com/pierrec/lz4/v4","Identifier":{"PURL":"pkg:golang/github.com/pierrec/lz4/v4@v4.1.31","UID":"652cb0767696b0f3"},"Version":"v4.1.31","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/client_golang@v1.24.1","Name":"github.com/prometheus/client_golang","Identifier":{"PURL":"pkg:golang/github.com/prometheus/client_golang@v1.24.1","UID":"a90e2527dd548354"},"Version":"v1.24.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/client_model@v0.6.2","Name":"github.com/prometheus/client_model","Identifier":{"PURL":"pkg:golang/github.com/prometheus/client_model@v0.6.2","UID":"d77a7319b44ba39"},"Version":"v0.6.2","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/common@v0.70.1","Name":"github.com/prometheus/common","Identifier":{"PURL":"pkg:golang/github.com/prometheus/common@v0.70.1","UID":"93840b78941e77f"},"Version":"v0.70.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/procfs@v0.21.1","Name":"github.com/prometheus/procfs","Identifier":{"PURL":"pkg:golang/github.com/prometheus/procfs@v0.21.1","UID":"92305678b6113c1"},"Version":"v0.21.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/redis/go-redis/v9@v9.22.0","Name":"github.com/redis/go-redis/v9","Identifier":{"PURL":"pkg:golang/github.com/redis/go-redis/v9@v9.22.0","UID":"e83b36320d1831c1"},"Version":"v9.22.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/sagikazarmark/locafero@v0.12.0","Name":"github.com/sagikazarmark/locafero","Identifier":{"PURL":"pkg:golang/github.com/sagikazarmark/locafero@v0.12.0","UID":"3577b671c5abe395"},"Version":"v0.12.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/spf13/afero@v1.15.0","Name":"github.com/spf13/afero","Identifier":{"PURL":"pkg:golang/github.com/spf13/afero@v1.15.0","UID":"f2dfcbf958dd728d"},"Version":"v1.15.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/spf13/cast@v1.10.0","Name":"github.com/spf13/cast","Identifier":{"PURL":"pkg:golang/github.com/spf13/cast@v1.10.0","UID":"27e4f0829afabbd"},"Version":"v1.10.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/spf13/pflag@v1.0.10","Name":"github.com/spf13/pflag","Identifier":{"PURL":"pkg:golang/github.com/spf13/pflag@v1.0.10","UID":"196b7f58893e4e3"},"Version":"v1.0.10","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/spf13/viper@v1.21.0","Name":"github.com/spf13/viper","Identifier":{"PURL":"pkg:golang/github.com/spf13/viper@v1.21.0","UID":"8f287b48f5932399"},"Version":"v1.21.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/subosito/gotenv@v1.6.0","Name":"github.com/subosito/gotenv","Identifier":{"PURL":"pkg:golang/github.com/subosito/gotenv@v1.6.0","UID":"b47acda5abc8869f"},"Version":"v1.6.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/vmihailenco/msgpack/v5@v5.4.1","Name":"github.com/vmihailenco/msgpack/v5","Identifier":{"PURL":"pkg:golang/github.com/vmihailenco/msgpack/v5@v5.4.1","UID":"3492faac8d670786"},"Version":"v5.4.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"github.com/vmihailenco/tagparser/v2@v2.0.0","Name":"github.com/vmihailenco/tagparser/v2","Identifier":{"PURL":"pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0","UID":"508ab3d420c293e3"},"Version":"v2.0.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"go.opentelemetry.io/auto/sdk@v1.2.1","Name":"go.opentelemetry.io/auto/sdk","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","UID":"d2b8cf15077ac4a5"},"Version":"v1.2.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0","Name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0","UID":"350242005ace3b6d"},"Version":"v0.70.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"go.opentelemetry.io/otel@v1.45.0","Name":"go.opentelemetry.io/otel","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel@v1.45.0","UID":"d574b6f46906378"},"Version":"v1.45.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"go.opentelemetry.io/otel/metric@v1.45.0","Name":"go.opentelemetry.io/otel/metric","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0","UID":"f60b97472a966806"},"Version":"v1.45.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"go.opentelemetry.io/otel/trace@v1.45.0","Name":"go.opentelemetry.io/otel/trace","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0","UID":"f8f89348da12b798"},"Version":"v1.45.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"go.uber.org/atomic@v1.11.0","Name":"go.uber.org/atomic","Identifier":{"PURL":"pkg:golang/go.uber.org/atomic@v1.11.0","UID":"46c283db1e437cb4"},"Version":"v1.11.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"go.yaml.in/yaml/v3@v3.0.5","Name":"go.yaml.in/yaml/v3","Identifier":{"PURL":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5","UID":"eada64e2c89d92ed"},"Version":"v3.0.5","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/crypto@v0.57.0","Name":"golang.org/x/crypto","Identifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.57.0","UID":"904a3e352cb009c2"},"Version":"v0.57.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/net@v0.60.0","Name":"golang.org/x/net","Identifier":{"PURL":"pkg:golang/golang.org/x/net@v0.60.0","UID":"df97e2721e32fa53"},"Version":"v0.60.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/oauth2@v0.37.0","Name":"golang.org/x/oauth2","Identifier":{"PURL":"pkg:golang/golang.org/x/oauth2@v0.37.0","UID":"bcad64cc83411ba4"},"Version":"v0.37.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/sync@v0.23.0","Name":"golang.org/x/sync","Identifier":{"PURL":"pkg:golang/golang.org/x/sync@v0.23.0","UID":"64b88720d11f3a16"},"Version":"v0.23.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/sys@v0.48.0","Name":"golang.org/x/sys","Identifier":{"PURL":"pkg:golang/golang.org/x/sys@v0.48.0","UID":"a3566178374c1fd2"},"Version":"v0.48.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/text@v0.42.0","Name":"golang.org/x/text","Identifier":{"PURL":"pkg:golang/golang.org/x/text@v0.42.0","UID":"958bcdc6a1c38757"},"Version":"v0.42.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"google.golang.org/api@v0.299.0","Name":"google.golang.org/api","Identifier":{"PURL":"pkg:golang/google.golang.org/api@v0.299.0","UID":"a7d2d5d6b6fbdce6"},"Version":"v0.299.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"google.golang.org/genproto/googleapis/rpc@v0.0.0-20260921155816-b14227669459","Name":"google.golang.org/genproto/googleapis/rpc","Identifier":{"PURL":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260921155816-b14227669459","UID":"198eaa8a2b35f8ba"},"Version":"v0.0.0-20260921155816-b14227669459","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"google.golang.org/grpc@v1.84.0","Name":"google.golang.org/grpc","Identifier":{"PURL":"pkg:golang/google.golang.org/grpc@v1.84.0","UID":"f887a2d247ecf396"},"Version":"v1.84.0","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"google.golang.org/protobuf@v1.36.12","Name":"google.golang.org/protobuf","Identifier":{"PURL":"pkg:golang/google.golang.org/protobuf@v1.36.12","UID":"2ce2e552df416f36"},"Version":"v1.36.12","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"},{"ID":"gopkg.in/natefinch/lumberjack.v2@v2.2.1","Name":"gopkg.in/natefinch/lumberjack.v2","Identifier":{"PURL":"pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1","UID":"d782a751d1b5f296"},"Version":"v2.2.1","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"AnalyzedBy":"gobinary"}],"Vulnerabilities":[{"VulnerabilityID":"GO-2026-5932","PkgID":"golang.org/x/crypto@v0.57.0","PkgName":"golang.org/x/crypto","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.57.0","UID":"904a3e352cb009c2"},"InstalledVersion":"v0.57.0","Status":"affected","Layer":{"Digest":"sha256:74dbe5356aabc6b0b430d9c90e6bcd08fcc71cc23b602fbfc3dcd18338261e9f","DiffID":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c"},"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Fingerprint":"sha256:b69cf2e405b55f3be74486a65c29ea41513195cf40da9da555686a0b6ac7dff2","Title":"The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues","Description":"The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.\n\nIf you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.","Severity":"UNKNOWN","References":["https://go.dev/issue/44226","https://pkg.go.dev/vuln/GO-2026-5932"]}]}]}