Skip to content

vulnscan 1.1.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Nov 23:39
· 3 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.1.1
This tag was signed with the committer’s verified signature.
jspaquet Jean-Sebastien Paquet
SSH Key Fingerprint: D27mn07zXI1uuzvb6n5M1E+4cJis7Dx6Q2vPffFW/KI
Verified
Learn about vigilant mode.
cabbde2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Container image

podman pull ghcr.io/cadworkna/vulnscan:1.1.1

Digest sha256:8bab5ad0129837672cfd16b47b7effe8273e26473a0a3a431652d8c42418e473, tagged :cabbde28d6566d25433c1f00009c9d3237065ef0 :1.1.1 :1.1 :1 :latest. Verify its provenance and SBOM attestation:

gh attestation verify oci://ghcr.io/cadworkna/vulnscan@sha256:8bab5ad0129837672cfd16b47b7effe8273e26473a0a3a431652d8c42418e473 --owner CadworkNA

Attached: vulnscan.cdx.json (CycloneDX SBOM of the image) and self-scan.json (Grype scan of
the image when it was built), signed by vulnscan-1.1.1.sigstore.json (Sigstore bundle, SLSA build provenance):

gh attestation verify vulnscan.cdx.json --owner CadworkNA --bundle vulnscan-1.1.1.sigstore.json

What's Changed

  • ci: Dependabot alerts only, no update pull requests by @jspaquet in #1
  • chore: release 1.1.1 by @jspaquet in #2

New Contributors

Full Changelog: https://github.com/CadworkNA/vulnscan/commits/v1.1.1

Contributors

jspaquet
Assets 6
Loading