{
  "endpoints": {
    "GET /api/v1/cves/{cve}": "every image affected by a CVE; add ?format=csv to download",
    "GET /api/v1/eol": "the end-of-life tag list",
    "GET /api/v1/images": "all tags; filters: q, image, variant, status, medlow=true, limit, offset; add ?format=csv to download",
    "GET /api/v1/images/{image}/{tag}": "one tag with its findings, one line per CVE; add ?format=csv to download the findings",
    "GET /api/v1/summary": "counts by status and the last scan time"
  },
  "name": "vuln-status API (read-only)",
  "statuses": {
    "clean": "no Critical/High",
    "eol": "end-of-life tag with Critical/High (excluded from the risk rate, still flagged by Wiz)",
    "nofix": "Critical/High, none fixable yet",
    "risk": "Critical/High with a fix",
    "skipped": "not rebuilt recently, not scanned",
    "unscanned": "no scan result"
  }
}
