Skip to content

Commit 1bc8ff1

Browse files
dhi: update vex get (#23367)
<!--Delete sections as needed --> ## Description Added new vex get command where applicable in DHI docs. - https://deploy-preview-23367--docsdocker.netlify.app/dhi/how-to/scan/#use-vex-to-filter-known-non-exploitable-cves - https://deploy-preview-23367--docsdocker.netlify.app/dhi/core-concepts/vex/#use-vex-to-filter-known-non-exploitable-cves - https://deploy-preview-23367--docsdocker.netlify.app/dhi/core-concepts/cves/#use-vex-to-filter-known-non-exploitable-cves ## Related issues or tickets DHI-646 ## Reviews <!-- Notes for reviewers here --> <!-- List applicable reviews (optionally @tag reviewers) --> - [ ] Editorial review - [ ] Product review Signed-off-by: Craig <[email protected]>
1 parent 4750bc5 commit 1bc8ff1

File tree

3 files changed

+24
-26
lines changed

3 files changed

+24
-26
lines changed

content/manuals/dhi/core-concepts/cves.md

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -153,19 +153,18 @@ manual configuration needed.
153153
To manually retrieve the VEX attestation for tools that support it:
154154

155155
```console
156-
$ docker scout attest get \
157-
--predicate-type https://openvex.dev/ns/v0.2.0 \
158-
--predicate \
159-
<your-namespace>/dhi-<image>:<tag> --platform <platform> > vex.json
156+
$ docker scout vex get <your-namespace>/dhi-<image>:<tag> --output vex.json
160157
```
161158

159+
> [!NOTE]
160+
>
161+
> The `docker scout vex get` command requires [Docker Scout
162+
> CLI](https://github.com/docker/scout-cli/) version 1.18.3 or later.
163+
162164
For example:
163165

164166
```console
165-
$ docker scout attest get \
166-
--predicate-type https://openvex.dev/ns/v0.2.0 \
167-
--predicate \
168-
docs/dhi-python:3.13 --platform linux/amd64 > vex.json
167+
$ docker scout vex get docs/dhi-python:3.13 --output vex.json
169168
```
170169

171170
This creates a `vex.json` file containing the VEX statements for the specified

content/manuals/dhi/core-concepts/vex.md

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -63,19 +63,18 @@ manual configuration is needed.
6363
To manually retrieve the VEX attestation for tools that support it:
6464

6565
```console
66-
$ docker scout attest get \
67-
--predicate-type https://openvex.dev/ns/v0.2.0 \
68-
--predicate \
69-
<your-namespace>/dhi-<image>:<tag> --platform <platform> > vex.json
66+
$ docker scout vex get <your-namespace>/dhi-<image>:<tag> --output vex.json
7067
```
7168

69+
> [!NOTE]
70+
>
71+
> The `docker scout vex get` command requires [Docker Scout
72+
> CLI](https://github.com/docker/scout-cli/) version 1.18.3 or later.
73+
7274
For example:
7375

7476
```console
75-
$ docker scout attest get \
76-
--predicate-type https://openvex.dev/ns/v0.2.0 \
77-
--predicate \
78-
docs/dhi-python:3.13 --platform linux/amd64 > vex.json
77+
$ docker scout vex get docs/dhi-python:3.13 --output vex.json
7978
```
8079

8180
This creates a `vex.json` file containing the VEX statements for the specified

content/manuals/dhi/how-to/scan.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -191,26 +191,26 @@ runtime behavior.
191191
When using Docker Scout, these VEX statements are automatically applied and no
192192
manual configuration needed.
193193

194-
To manually create a JSON file VEX attestation for tools that support it:
194+
To manually create a JSON file of VEX attestations for tools that support it:
195195

196196
```console
197-
$ docker scout attest get \
198-
--predicate-type https://openvex.dev/ns/v0.2.0 \
199-
--predicate \
200-
<your-namespace>/dhi-<image>:<tag> --platform <platform> > vex.json
197+
$ docker scout vex get <your-namespace>/dhi-<image>:<tag> --output vex.json
201198
```
202199

200+
> [!NOTE]
201+
>
202+
> The `docker scout vex get` command requires [Docker Scout
203+
> CLI](https://github.com/docker/scout-cli/) version 1.18.3 or later.
204+
203205
For example:
204206

205207
```console
206-
$ docker scout attest get \
207-
--predicate-type https://openvex.dev/ns/v0.2.0 \
208-
--predicate \
209-
docs/dhi-python:3.13 --platform linux/amd64 > vex.json
208+
$ docker scout vex get docs/dhi-python:3.13 --output vex.json
210209
```
211210

212211
This creates a `vex.json` file containing the VEX statements for the specified
213-
image. You can then use this file with tools that support VEX to filter out known non-exploitable CVEs.
212+
image. You can then use this file with tools that support VEX to filter out
213+
known non-exploitable CVEs.
214214

215215
For example, with Grype and Trivy, you can use the `--vex` flag to apply the VEX
216216
statements during the scan:

0 commit comments

Comments
 (0)