{
  "apiVersion": "v1",
  "resource": "security",
  "slug": "alertmanager",
  "image": "ghcr.io/quenchworks/images/alertmanager",
  "source": "QuenchWorks nightly Trivy scan (each published image digest)",
  "latest": {
    "version": "0.33.1",
    "tag": "ghcr.io/quenchworks/images/alertmanager:0.33.1",
    "critical": 0,
    "high": 0,
    "medium": 0,
    "low": 0,
    "unknown": 2,
    "total": 2,
    "fixable": 0,
    "grade": "B",
    "score": 96,
    "cves": [
      {
        "id": "GO-2026-5932",
        "severity": "UNKNOWN",
        "pkg": "golang.org/x/crypto",
        "installed": "v0.54.0",
        "fixed": null,
        "title": "The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues",
        "url": "https://go.dev/issue/44226",
        "targets": [
          "usr/bin/alertmanager",
          "usr/bin/amtool"
        ]
      }
    ]
  },
  "versions": [
    {
      "version": "0.33.1",
      "tag": "ghcr.io/quenchworks/images/alertmanager:0.33.1",
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0,
      "unknown": 2,
      "total": 2,
      "fixable": 0,
      "grade": "B",
      "score": 96,
      "cves": [
        {
          "id": "GO-2026-5932",
          "severity": "UNKNOWN",
          "pkg": "golang.org/x/crypto",
          "installed": "v0.54.0",
          "fixed": null,
          "title": "The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues",
          "url": "https://go.dev/issue/44226",
          "targets": [
            "usr/bin/alertmanager",
            "usr/bin/amtool"
          ]
        }
      ]
    }
  ]
}