{"data":{"slug":"kusionstack-kusion","name":"kusion","trust":{"provenance":{"is_fork":false,"github_id":488866928,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-20T18:01:35.547Z","maintenance":{"label":"Slowing","score":36,"methodology":"github_public_v1","releases_90d":0,"days_since_push":228,"last_release_at":"2025-06-30T09:20:16Z","stars_delta_30d":1,"open_issues_delta_30d":0},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":60,"high_count":0,"last_scan_at":"2026-07-11T11:22:12.830Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GO-2022-0635","severity":"low","title":"GO-2022-0635","package":"github.com/aws/aws-sdk-go@v1.48.6","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2022-0646","severity":"low","title":"GO-2022-0646","package":"github.com/aws/aws-sdk-go@v1.48.6","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-2x5j-vhc8-9cwm","severity":"low","title":"GHSA-2x5j-vhc8-9cwm","package":"github.com/cloudflare/circl@v1.3.7","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-q9hv-hpm4-hj6x","severity":"low","title":"GHSA-q9hv-hpm4-hj6x","package":"github.com/cloudflare/circl@v1.3.7","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3754","severity":"low","title":"GO-2025-3754","package":"github.com/cloudflare/circl@v1.3.7","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4550","severity":"low","title":"GO-2026-4550","package":"github.com/cloudflare/circl@v1.3.7","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-265r-hfxg-fhmg","severity":"low","title":"GHSA-265r-hfxg-fhmg","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-jpcc-p29g-p8mq","severity":"low","title":"GHSA-jpcc-p29g-p8mq","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m6hq-p25p-ffr2","severity":"low","title":"GHSA-m6hq-p25p-ffr2","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-pwhc-rpq9-4c8w","severity":"low","title":"GHSA-pwhc-rpq9-4c8w","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-xhf5-7wjv-pqxp","severity":"low","title":"GHSA-xhf5-7wjv-pqxp","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3528","severity":"low","title":"GO-2025-3528","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-4100","severity":"low","title":"GO-2025-4100","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-4108","severity":"low","title":"GO-2025-4108","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5064","severity":"low","title":"GO-2026-5064","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5338","severity":"low","title":"GO-2026-5338","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5475","severity":"low","title":"GO-2026-5475","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5622","severity":"low","title":"GO-2026-5622","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5758","severity":"low","title":"GO-2026-5758","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-3p65-76g6-3w7r","severity":"low","title":"GHSA-3p65-76g6-3w7r","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-6pjf-3r9x-m592","severity":"low","title":"GHSA-6pjf-3r9x-m592","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-f2g3-hh2r-cwgc","severity":"low","title":"GHSA-f2g3-hh2r-cwgc","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5094","severity":"low","title":"GO-2026-5094","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5185","severity":"low","title":"GO-2026-5185","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-p436-gjf2-799p","severity":"low","title":"GHSA-p436-gjf2-799p","package":"github.com/docker/cli@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4610","severity":"low","title":"GO-2026-4610","package":"github.com/docker/cli@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-4vq8-7jfc-9cvp","severity":"low","title":"GHSA-4vq8-7jfc-9cvp","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-pxq6-2prw-chj9","severity":"low","title":"GHSA-pxq6-2prw-chj9","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-rg2x-37c3-w2rh","severity":"low","title":"GHSA-rg2x-37c3-w2rh","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vp62-88p7-qqf5","severity":"low","title":"GHSA-vp62-88p7-qqf5","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x744-4wpc-v9h2","severity":"low","title":"GHSA-x744-4wpc-v9h2","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x86f-5xw2-fm2r","severity":"low","title":"GHSA-x86f-5xw2-fm2r","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4883","severity":"low","title":"GO-2026-4883","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4887","severity":"low","title":"GO-2026-4887","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5617","severity":"low","title":"GO-2026-5617","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5668","severity":"low","title":"GO-2026-5668","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5746","severity":"low","title":"GO-2026-5746","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vrw8-fxc6-2r93","severity":"low","title":"GHSA-vrw8-fxc6-2r93","package":"github.com/go-chi/chi/v5@v5.0.12","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m3xc-h892-ggx6","severity":"low","title":"GHSA-m3xc-h892-ggx6","package":"github.com/go-git/go-billy/v5@v5.5.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-qw64-3x98-g7q2","severity":"low","title":"GHSA-qw64-3x98-g7q2","package":"github.com/go-git/go-billy/v5@v5.5.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-37cx-329c-33x3","severity":"low","title":"GHSA-37cx-329c-33x3","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-389r-gv7p-r3rp","severity":"low","title":"GHSA-389r-gv7p-r3rp","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-3xc5-wrhm-f963","severity":"low","title":"GHSA-3xc5-wrhm-f963","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-crhj-59gh-8x96","severity":"low","title":"GHSA-crhj-59gh-8x96","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-gm2x-2g9h-ccm8","severity":"low","title":"GHSA-gm2x-2g9h-ccm8","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-jhf3-xxhw-2wpp","severity":"low","title":"GHSA-jhf3-xxhw-2wpp","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m7cr-m3pv-hgrp","severity":"low","title":"GHSA-m7cr-m3pv-hgrp","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-r9px-m959-cxf4","severity":"low","title":"GHSA-r9px-m959-cxf4","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-v725-9546-7q7m","severity":"low","title":"GHSA-v725-9546-7q7m","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-w5pp-99ch-qj29","severity":"low","title":"GHSA-w5pp-99ch-qj29","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3367","severity":"low","title":"GO-2025-3367","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3368","severity":"low","title":"GO-2025-3368","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4473","severity":"low","title":"GO-2026-4473","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4909","severity":"low","title":"GO-2026-4909","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4910","severity":"low","title":"GO-2026-4910","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5496","severity":"low","title":"GO-2026-5496","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-78h2-9frx-2jm8","severity":"low","title":"GHSA-78h2-9frx-2jm8","package":"github.com/go-jose/go-jose/v3@v3.0.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-c6gw-w398-hv78","severity":"low","title":"GHSA-c6gw-w398-hv78","package":"github.com/go-jose/go-jose/v3@v3.0.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3485","severity":"low","title":"GO-2025-3485","package":"github.com/go-jose/go-jose/v3@v3.0.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4945","severity":"low","title":"GO-2026-4945","package":"github.com/go-jose/go-jose/v3@v3.0.3","location":"go.sum","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T11:22:16.055671+00:00","findings_count":60,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/KusionStack/kusion","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GO-2022-0635","severity":"low","title":"GO-2022-0635","package":"github.com/aws/aws-sdk-go@v1.48.6","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2022-0646","severity":"low","title":"GO-2022-0646","package":"github.com/aws/aws-sdk-go@v1.48.6","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-2x5j-vhc8-9cwm","severity":"low","title":"GHSA-2x5j-vhc8-9cwm","package":"github.com/cloudflare/circl@v1.3.7","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-q9hv-hpm4-hj6x","severity":"low","title":"GHSA-q9hv-hpm4-hj6x","package":"github.com/cloudflare/circl@v1.3.7","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3754","severity":"low","title":"GO-2025-3754","package":"github.com/cloudflare/circl@v1.3.7","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4550","severity":"low","title":"GO-2026-4550","package":"github.com/cloudflare/circl@v1.3.7","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-265r-hfxg-fhmg","severity":"low","title":"GHSA-265r-hfxg-fhmg","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-jpcc-p29g-p8mq","severity":"low","title":"GHSA-jpcc-p29g-p8mq","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m6hq-p25p-ffr2","severity":"low","title":"GHSA-m6hq-p25p-ffr2","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-pwhc-rpq9-4c8w","severity":"low","title":"GHSA-pwhc-rpq9-4c8w","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-xhf5-7wjv-pqxp","severity":"low","title":"GHSA-xhf5-7wjv-pqxp","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3528","severity":"low","title":"GO-2025-3528","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-4100","severity":"low","title":"GO-2025-4100","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-4108","severity":"low","title":"GO-2025-4108","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5064","severity":"low","title":"GO-2026-5064","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5338","severity":"low","title":"GO-2026-5338","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5475","severity":"low","title":"GO-2026-5475","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5622","severity":"low","title":"GO-2026-5622","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5758","severity":"low","title":"GO-2026-5758","package":"github.com/containerd/containerd@v1.7.23","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-3p65-76g6-3w7r","severity":"low","title":"GHSA-3p65-76g6-3w7r","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-6pjf-3r9x-m592","severity":"low","title":"GHSA-6pjf-3r9x-m592","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-f2g3-hh2r-cwgc","severity":"low","title":"GHSA-f2g3-hh2r-cwgc","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5094","severity":"low","title":"GO-2026-5094","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5185","severity":"low","title":"GO-2026-5185","package":"github.com/distribution/distribution/v3@v3.0.0-20221208165359-362910506bc2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-p436-gjf2-799p","severity":"low","title":"GHSA-p436-gjf2-799p","package":"github.com/docker/cli@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4610","severity":"low","title":"GO-2026-4610","package":"github.com/docker/cli@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-4vq8-7jfc-9cvp","severity":"low","title":"GHSA-4vq8-7jfc-9cvp","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-pxq6-2prw-chj9","severity":"low","title":"GHSA-pxq6-2prw-chj9","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-rg2x-37c3-w2rh","severity":"low","title":"GHSA-rg2x-37c3-w2rh","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vp62-88p7-qqf5","severity":"low","title":"GHSA-vp62-88p7-qqf5","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x744-4wpc-v9h2","severity":"low","title":"GHSA-x744-4wpc-v9h2","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x86f-5xw2-fm2r","severity":"low","title":"GHSA-x86f-5xw2-fm2r","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4883","severity":"low","title":"GO-2026-4883","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4887","severity":"low","title":"GO-2026-4887","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5617","severity":"low","title":"GO-2026-5617","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5668","severity":"low","title":"GO-2026-5668","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5746","severity":"low","title":"GO-2026-5746","package":"github.com/docker/docker@v27.3.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vrw8-fxc6-2r93","severity":"low","title":"GHSA-vrw8-fxc6-2r93","package":"github.com/go-chi/chi/v5@v5.0.12","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m3xc-h892-ggx6","severity":"low","title":"GHSA-m3xc-h892-ggx6","package":"github.com/go-git/go-billy/v5@v5.5.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-qw64-3x98-g7q2","severity":"low","title":"GHSA-qw64-3x98-g7q2","package":"github.com/go-git/go-billy/v5@v5.5.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-37cx-329c-33x3","severity":"low","title":"GHSA-37cx-329c-33x3","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-389r-gv7p-r3rp","severity":"low","title":"GHSA-389r-gv7p-r3rp","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-3xc5-wrhm-f963","severity":"low","title":"GHSA-3xc5-wrhm-f963","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-crhj-59gh-8x96","severity":"low","title":"GHSA-crhj-59gh-8x96","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-gm2x-2g9h-ccm8","severity":"low","title":"GHSA-gm2x-2g9h-ccm8","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-jhf3-xxhw-2wpp","severity":"low","title":"GHSA-jhf3-xxhw-2wpp","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m7cr-m3pv-hgrp","severity":"low","title":"GHSA-m7cr-m3pv-hgrp","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-r9px-m959-cxf4","severity":"low","title":"GHSA-r9px-m959-cxf4","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-v725-9546-7q7m","severity":"low","title":"GHSA-v725-9546-7q7m","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-w5pp-99ch-qj29","severity":"low","title":"GHSA-w5pp-99ch-qj29","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3367","severity":"low","title":"GO-2025-3367","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3368","severity":"low","title":"GO-2025-3368","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4473","severity":"low","title":"GO-2026-4473","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4909","severity":"low","title":"GO-2026-4909","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4910","severity":"low","title":"GO-2026-4910","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5496","severity":"low","title":"GO-2026-5496","package":"github.com/go-git/go-git/v5@v5.12.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-78h2-9frx-2jm8","severity":"low","title":"GHSA-78h2-9frx-2jm8","package":"github.com/go-jose/go-jose/v3@v3.0.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-c6gw-w398-hv78","severity":"low","title":"GHSA-c6gw-w398-hv78","package":"github.com/go-jose/go-jose/v3@v3.0.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2025-3485","severity":"low","title":"GO-2025-3485","package":"github.com/go-jose/go-jose/v3@v3.0.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4945","severity":"low","title":"GO-2026-4945","package":"github.com/go-jose/go-jose/v3@v3.0.3","location":"go.sum","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}