Vulnerability Reportgolang:1.27.0-alpine

This base/runtime image is a clean foundation for building production images. It is an official Docker image pinned by digest, and its pre-calculated threat score is 0. The provided stats do show 3 exposed-surface and 18 post-exploit-only findings, but none are medium or high severity: no findings are at severity 6.0 or above, with max exposed severity 3.15 and max post-exploit severity 2.7. Because these are low-severity findings and no CVE IDs were provided in the top findings, they do not change the SAFE verdict for images built on this base. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.