Docker Scout

Version updated for docker/scout-action to version v1.8.0.

  • This publisher is shown as ‘verified’ by GitHub.
  • This action is used across all versions by 297 repositories.

Go to the GitHub Marketplace to find the latest changes.

Release notes

Highlights

  • Add new attestation-add command to GHA This can be used to add Vex documents to images for instance. See the documentation on how to suppress image vulnerabilities with VEX
    uses: docker/scout-action@v1
with:
  command: attestation-add
  image: IMAGE
  file: in-toto.vex.json
  predicate-type: https://openvex.dev/ns/v0.2.0

Bug Fixes / Improvements

  • Improve format of EPSS score and percentile
    • Before:
      EPSS Score      : 0.000440
EPSS Percentile : 0.092510
    • After:
      EPSS Score      : 0.04%
EPSS Percentile : 9th percentile
  • Fix cves command when used to analyse a local file system with a markdown output

Contributors

@cdupuis @LaurentGoderre @eunomie