v1.18.1

Merge 39f1019cb9fdb2ee182b53aa6d5622662da33215 into c94507b5bf72bd252…

v1.18.0

Merge 8902ccab5ce8dc6a176b3c9ec16cdf91109011d4 into 381b657c498a4d287…

v1.17.1

Merge e07bccd7af32a785595305309423904814ac3536 into d341d36d6eebbe05c…

v1.17.0

Merge b8e0e28db53a29161c11fabcd6d8ad434b53878e into 0133ff88fe16d4a41…

v1.16.3

Merge 2448c740cbd6ac04901cc46ead978f2f4b6d5305 into a55ca454857962fda…

v1.16.2

Merge c9725977d80d42f014b943671ca30c322423bb81 into b23590dc1e4d09feb…

v1.16.1

What's Changed

• Fix in-toto subject digest for the docker scout attestation add command by @cdupuis

v1.16.0

What's Changed

• Add secret scanning to sbom command by @cdupuis
• Keep original pattern to find nested matches too by @cdupuis
• Make licenses unqiue by @cdupuis
• Print platform in markdown output by @cdupuis
• Normalize licenses using spdx license list by @cdupuis
• Updates to make spdx output spec compliant by @cdupuis
• Check dir exists before creating temp file by @chrispatrick
• Update Go, crypto module and alpine by @cdupuis
• Add support for attestations for images from Tanzu Application Catalog by @cdupuis
• Fix behaviour with multi images in attest cmd by @cdupuis

v1.15.1

What's Changed

• Bug fixes by @cdupuis

New Contributors

• @neilprosser made their first contribution

v1.15.0

Highlights

• Add CycloneDX as output format for the sbom cmd

  - name: Docker Scout
    id: docker-scout-environment
    uses: docker/scout-action@v1
    with:
      command: sbom
      image: REF
      format: cyclonedx

Bug Fixes / Improvements

• Improve reading and caching of attestations with containerd image store.

---

Contributors