{"grype":{"matches":[],"source":{"type":"file","target":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/go-reach-uncalled-bin/app"},"distro":{"name":"","version":"","idLike":null},"descriptor":{"name":"grype","version":"0.120.1","configuration":{"output":["json"],"file":"","pretty":false,"distro":"","add-cpes-if-none":false,"output-template-file":"","check-for-app-update":true,"only-fixed":false,"only-notfixed":false,"ignore-wontfix":"","platform":"","search":{"scope":"squashed","unindexed-archives":false,"indexed-archives":true},"ignore":[{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"kernel-headers","version":"","language":"","type":"rpm","location":"","upstream-name":"kernel"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux(-.*)?-headers-.*","version":"","language":"","type":"deb","location":"","upstream-name":"linux.*"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux-libc-dev","version":"","language":"","type":"deb","location":"","upstream-name":"linux"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux-kbuild-.*","version":"","language":"","type":"deb","location":"","upstream-name":"linux.*"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"}],"exclude":[],"externalSources":{"enable":false,"maven":{"searchUpstreamBySha1":true,"baseUrl":"https://search.maven.org/solrsearch/select","rateLimit":300000000}},"match":{"java":{"using-cpes":false},"jvm":{"using-cpes":true},"dotnet":{"using-cpes":false},"golang":{"using-cpes":false,"always-use-cpe-for-stdlib":false,"allow-main-module-pseudo-version-comparison":false},"javascript":{"using-cpes":false},"python":{"using-cpes":false},"ruby":{"using-cpes":false},"rust":{"using-cpes":false},"hex":{"using-cpes":false},"stock":{"using-cpes":true},"dpkg":{"using-cpes":false,"missing-epoch-strategy":"zero","use-cpes-for-eol":false},"rpm":{"using-cpes":false,"missing-epoch-strategy":"auto","use-cpes-for-eol":false}},"fail-on-severity":"","registry":{"insecure-skip-tls-verify":false,"insecure-use-http":false,"ca-cert":""},"show-suppressed":false,"include-matcher-suppressions":false,"by-cve":false,"SortBy":{"sort-by":"risk"},"name":"","default-image-pull-source":"","from":null,"vex-documents":[],"vex-add":[],"match-upstream-kernel-headers":false,"fix-channel":{"redhat-eus":{"apply":"auto","versions":">= 8.0"},"ubuntu-esm":{"apply":"auto","versions":""}},"timestamp":true,"alerts":{"enable-eol-distro-warnings":true},"db":{"cache-dir":"~/projects/sca-benchmark/.vuln-db-2026-10-14/grype","update-url":"https://grype.anchore.io/databases","ca-cert":"","auto-update":false,"validate-by-hash-on-start":true,"validate-age":false,"max-allowed-built-age":432000000000000,"require-update-check":false,"update-available-timeout":30000000000,"update-download-timeout":300000000000,"max-update-check-frequency":7200000000000},"exp":{},"dev":{"db":{"debug":false}}},"db":{"status":{"schemaVersion":"v6.1.10","from":"https://grype.anchore.io/databases/v6/vulnerability-db_v6.1.10_2026-10-12T00:41:00Z_1791873320.tar.zst?checksum=sha256%3Aed50c6deedbbe39f815f855fb55208a1f261ebec6a91d2847b1230200bbb7b20","built":"2026-10-13T06:35:20Z","path":"~/projects/sca-benchmark/.vuln-db-2026-10-14/grype/6/vulnerability.db","valid":true},"providers":{"alma":{"captured":"2026-10-13T00:39:19Z","input":"xxh64:ec91471f53bafece"},"alpine":{"captured":"2026-10-13T00:39:00Z","input":"xxh64:4e34647efc080919"},"amazon":{"captured":"2026-10-13T00:38:59Z","input":"xxh64:1d440a6fe12cb43e"},"arch":{"captured":"2026-10-13T00:39:07Z","input":"xxh64:be7ff0877c49ab37"},"bitnami":{"captured":"2026-10-13T00:40:02Z","input":"xxh64:de70095674b0bd6a"},"chainguard":{"captured":"2026-10-13T00:39:08Z","input":"xxh64:e2fcc4ecd019f0c3"},"chainguard-libraries":{"captured":"2026-10-13T00:39:12Z","input":"xxh64:2312587aba5f9dbe"},"debian":{"captured":"2026-10-13T00:39:21Z","input":"xxh64:c1c6eed2be2f8542"},"echo":{"captured":"2026-10-13T00:38:53Z","input":"xxh64:678684d41e38a999"},"eol":{"captured":"2026-10-13T00:39:01Z","input":"xxh64:a4f625880b41a599"},"epss":{"captured":"2026-10-13T00:38:57Z","input":"xxh64:a3f29536c4fb718b"},"fedora":{"captured":"2026-10-13T00:39:04Z","input":"xxh64:bca8272bceea3610"},"github":{"captured":"2026-10-13T00:39:22Z","input":"xxh64:d2e9124a32b0a34f"},"govulndb":{"captured":"2026-10-13T00:38:57Z","input":"xxh64:22f1919a589c6961"},"hummingbird":{"captured":"2026-10-13T00:40:10Z","input":"xxh64:aca818e183e3c1b0"},"kev":{"captured":"2026-10-13T00:39:17Z","input":"xxh64:b0d499c7f5ff1cee"},"mariner":{"captured":"2026-10-13T00:38:56Z","input":"xxh64:8e45e13885901728"},"minimos":{"captured":"2026-10-13T00:38:55Z","input":"xxh64:f56940808a75a33c"},"nvd":{"captured":"2026-10-13T00:39:46Z","input":"xxh64:a388f055b49db819"},"oracle":{"captured":"2026-10-13T00:39:05Z","input":"xxh64:9dbe6f51c09db94c"},"photon":{"captured":"2026-10-13T00:39:03Z","input":"xxh64:0022a5e013a8e314"},"rhel":{"captured":"2026-10-13T00:39:18Z","input":"xxh64:6f12e0aff17a6489"},"secureos":{"captured":"2026-10-13T00:38:54Z","input":"xxh64:58dd3cfa3af8ab8f"},"sles":{"captured":"2026-10-12T00:41:00Z","input":"xxh64:4a5a88f30af2896c"},"ubuntu":{"captured":"2026-10-13T00:39:00Z","input":"xxh64:0b36e59d360c17fe"},"wolfi":{"captured":"2026-10-13T00:39:03Z","input":"xxh64:534f4c9c3d08c6f8"}}},"timestamp":"2026-10-15T10:10:21.389999+09:00"}},"inventory":["pkg:golang/golang.org/x/text@v0.3.7","pkg:golang/stdlib@1.25.5"]}