-
**What would you like to be added**:
Set the return code to a different number other than `0` or `1` when a scan fails.
There may be 1 or more than 1 error codes for failed scans. For example, the i…
-
Why can't dep-scan accept existing vulnerability data in vex and other formats and prioritize it by understanding the application context? The key differentiation aspects of dep-scan are the CVE insig…
-
**What would you like to be added**:
When `grype` decides to update the vulnerability database before a run, `grype` should be able to download a diff of what changed, rather than the entire databa…
-
**What would you like to be added**:
Support for Fedora CoreOS which uses rpm-ostree https://docs.fedoraproject.org/en-US/fedora/f37/release-notes/sysadmin/Ostree/#readonly-sysroot-ostree-desktopsl
…
-
**What happened**:
We built a test image with a locally built nginx package: `distroless.dev/nginx:latest`
The locally built nginx package is matched against Alpine vulnerability data, despite n…
-
Please add the option to filter output by severity.
This will provide the opportunity to quickly automatic scan and process results, for example like trivy --severity=Critical,High
Thank you!
-
**What happened**:
Grype doesn't appear to be procesing CPE configurations correctly in the case where logical operators are used in NVD's CPE data. Specifically, when a CPE configuration has "AND"…
-
**What would you like to be added**:
If given file is compressed or ISO, try to export all of the compressed files recursively to scan.
**Why is this needed**:
My use case was to scan Lima im…
-
## Suggestion
That should be interesting that the existing RHTAP "sbow-task" and its image supports different tools able to grab the SBOM and generate the output and not only cosign as by example w…
-
Backport fix for Support scanning k3s images with grype
* #8618