{
  "apiVersion": "v1",
  "resource": "security",
  "slug": "alertmanager",
  "image": "ghcr.io/quenchworks/images/alertmanager",
  "source": "QuenchWorks nightly Trivy scan (each published image digest)",
  "links": {
    "image": "/api/v1/security/alertmanager.json"
  },
  "version": "0.33.1",
  "tag": "ghcr.io/quenchworks/images/alertmanager:0.33.1",
  "critical": 0,
  "high": 0,
  "medium": 0,
  "low": 0,
  "unknown": 2,
  "total": 2,
  "fixable": 0,
  "grade": "B",
  "score": 96,
  "cves": [
    {
      "id": "GO-2026-5932",
      "severity": "UNKNOWN",
      "pkg": "golang.org/x/crypto",
      "installed": "v0.54.0",
      "fixed": null,
      "title": "The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues",
      "url": "https://go.dev/issue/44226",
      "targets": [
        "usr/bin/alertmanager",
        "usr/bin/amtool"
      ]
    }
  ]
}