What's Changed
- Minor fixes for DHI @cdupuis
- Add docker scout vex get command to get a merged VEX document from all VEX attestations @cdupuis
- VEX and SPDX fixes @cdupuis
- Documentation updates @craig-osterhout @dvdksn
- CVE fixes @cdupuis
- Update dependencies @cdupuis
- Handle attestation source failures more gracefully @chrispatrick
- Bug fixes including around VEX, versioning and indexing @cdupuis
- Fix vulnerabilities @jpbriend
- Fix apk version handling @cdupuis
- Support SLSA v1 Provenance @chrispatrick
- Fix Go purl versioning @cdupuis
- Fix VCS provenance parsing @chrispatrick
Contributors
cdupuis, jpbriend, and 3 other contributors