File tree Expand file tree Collapse file tree 3 files changed +24
-26
lines changed Expand file tree Collapse file tree 3 files changed +24
-26
lines changed Original file line number Diff line number Diff line change @@ -153,19 +153,18 @@ manual configuration needed.
153153To manually retrieve the VEX attestation for tools that support it:
154154
155155``` console
156- $ docker scout attest get \
157- --predicate-type https://openvex.dev/ns/v0.2.0 \
158- --predicate \
159- <your-namespace>/dhi-<image>:<tag> --platform <platform> > vex.json
156+ $ docker scout vex get < your-namespace> /dhi-< image> :< tag> --output vex.json
160157```
161158
159+ > [ !NOTE]
160+ >
161+ > The ` docker scout vex get ` command requires [ Docker Scout
162+ > CLI] ( https://github.com/docker/scout-cli/ ) version 1.18.3 or later.
163+
162164For example:
163165
164166``` console
165- $ docker scout attest get \
166- --predicate-type https://openvex.dev/ns/v0.2.0 \
167- --predicate \
168- docs/dhi-python:3.13 --platform linux/amd64 > vex.json
167+ $ docker scout vex get docs/dhi-python:3.13 --output vex.json
169168```
170169
171170This creates a ` vex.json ` file containing the VEX statements for the specified
Original file line number Diff line number Diff line change @@ -63,19 +63,18 @@ manual configuration is needed.
6363To manually retrieve the VEX attestation for tools that support it:
6464
6565``` console
66- $ docker scout attest get \
67- --predicate-type https://openvex.dev/ns/v0.2.0 \
68- --predicate \
69- <your-namespace>/dhi-<image>:<tag> --platform <platform> > vex.json
66+ $ docker scout vex get < your-namespace> /dhi-< image> :< tag> --output vex.json
7067```
7168
69+ > [ !NOTE]
70+ >
71+ > The ` docker scout vex get ` command requires [ Docker Scout
72+ > CLI] ( https://github.com/docker/scout-cli/ ) version 1.18.3 or later.
73+
7274For example:
7375
7476``` console
75- $ docker scout attest get \
76- --predicate-type https://openvex.dev/ns/v0.2.0 \
77- --predicate \
78- docs/dhi-python:3.13 --platform linux/amd64 > vex.json
77+ $ docker scout vex get docs/dhi-python:3.13 --output vex.json
7978```
8079
8180This creates a ` vex.json ` file containing the VEX statements for the specified
Original file line number Diff line number Diff line change @@ -191,26 +191,26 @@ runtime behavior.
191191When using Docker Scout, these VEX statements are automatically applied and no
192192manual configuration needed.
193193
194- To manually create a JSON file VEX attestation for tools that support it :
194+ To manually create a JSON file of VEX attestations for tools that support it :
195195
196196` ` ` console
197- $ docker scout attest get \
198- --predicate-type https://openvex.dev/ns/v0.2.0 \
199- --predicate \
200- <your-namespace>/dhi-<image>:<tag> --platform <platform> > vex.json
197+ $ docker scout vex get <your-namespace>/dhi-<image>:<tag> --output vex.json
201198` ` `
202199
200+ > [!NOTE]
201+ >
202+ > The `docker scout vex get` command requires [Docker Scout
203+ > CLI](https://github.com/docker/scout-cli/) version 1.18.3 or later.
204+
203205For example :
204206
205207` ` ` console
206- $ docker scout attest get \
207- --predicate-type https://openvex.dev/ns/v0.2.0 \
208- --predicate \
209- docs/dhi-python:3.13 --platform linux/amd64 > vex.json
208+ $ docker scout vex get docs/dhi-python:3.13 --output vex.json
210209` ` `
211210
212211This creates a `vex.json` file containing the VEX statements for the specified
213- image. You can then use this file with tools that support VEX to filter out known non-exploitable CVEs.
212+ image. You can then use this file with tools that support VEX to filter out
213+ known non-exploitable CVEs.
214214
215215For example, with Grype and Trivy, you can use the `--vex` flag to apply the VEX
216216statements during the scan :
You can’t perform that action at this time.
0 commit comments