Skip to content
Compare
Choose a tag to compare
@github-actions github-actions released this 24 Jul 08:22
· 17 commits to main since this release
c854600

Highlights

  • Filter CVEs listed in the CISA Known Exploited Vulnerabilities catalog.
    uses: docker/scout-action@v1
    with:
      command: cves
      image: [IMAGE]
      only-cisa-kev: true

Bug Fixes / Improvements

  • Allow VEX matching when no subcomponents.
  • Fix panic when attaching an invalid VEX document.
  • Fix SPDX document root.
  • Fix base image detection when image uses SCRATCH as the base image.

Contributors

@cdupuis @LaurentGoderre @felipecruz91