File tree Expand file tree Collapse file tree 3 files changed +24
-26
lines changed Expand file tree Collapse file tree 3 files changed +24
-26
lines changed Original file line number Diff line number Diff line change @@ -153,19 +153,18 @@ manual configuration needed.
153
153
To manually retrieve the VEX attestation for tools that support it:
154
154
155
155
``` console
156
- $ docker scout attest get \
157
- --predicate-type https://openvex.dev/ns/v0.2.0 \
158
- --predicate \
159
- <your-namespace>/dhi-<image>:<tag> --platform <platform> > vex.json
156
+ $ docker scout vex get < your-namespace> /dhi-< image> :< tag> --output vex.json
160
157
```
161
158
159
+ > [ !NOTE]
160
+ >
161
+ > The ` docker scout vex get ` command requires [ Docker Scout
162
+ > CLI] ( https://github.com/docker/scout-cli/ ) version 1.18.3 or later.
163
+
162
164
For example:
163
165
164
166
``` console
165
- $ docker scout attest get \
166
- --predicate-type https://openvex.dev/ns/v0.2.0 \
167
- --predicate \
168
- docs/dhi-python:3.13 --platform linux/amd64 > vex.json
167
+ $ docker scout vex get docs/dhi-python:3.13 --output vex.json
169
168
```
170
169
171
170
This creates a ` vex.json ` file containing the VEX statements for the specified
Original file line number Diff line number Diff line change @@ -63,19 +63,18 @@ manual configuration is needed.
63
63
To manually retrieve the VEX attestation for tools that support it:
64
64
65
65
``` console
66
- $ docker scout attest get \
67
- --predicate-type https://openvex.dev/ns/v0.2.0 \
68
- --predicate \
69
- <your-namespace>/dhi-<image>:<tag> --platform <platform> > vex.json
66
+ $ docker scout vex get < your-namespace> /dhi-< image> :< tag> --output vex.json
70
67
```
71
68
69
+ > [ !NOTE]
70
+ >
71
+ > The ` docker scout vex get ` command requires [ Docker Scout
72
+ > CLI] ( https://github.com/docker/scout-cli/ ) version 1.18.3 or later.
73
+
72
74
For example:
73
75
74
76
``` console
75
- $ docker scout attest get \
76
- --predicate-type https://openvex.dev/ns/v0.2.0 \
77
- --predicate \
78
- docs/dhi-python:3.13 --platform linux/amd64 > vex.json
77
+ $ docker scout vex get docs/dhi-python:3.13 --output vex.json
79
78
```
80
79
81
80
This creates a ` vex.json ` file containing the VEX statements for the specified
Original file line number Diff line number Diff line change @@ -191,26 +191,26 @@ runtime behavior.
191
191
When using Docker Scout, these VEX statements are automatically applied and no
192
192
manual configuration needed.
193
193
194
- To manually create a JSON file VEX attestation for tools that support it :
194
+ To manually create a JSON file of VEX attestations for tools that support it :
195
195
196
196
` ` ` console
197
- $ docker scout attest get \
198
- --predicate-type https://openvex.dev/ns/v0.2.0 \
199
- --predicate \
200
- <your-namespace>/dhi-<image>:<tag> --platform <platform> > vex.json
197
+ $ docker scout vex get <your-namespace>/dhi-<image>:<tag> --output vex.json
201
198
` ` `
202
199
200
+ > [!NOTE]
201
+ >
202
+ > The `docker scout vex get` command requires [Docker Scout
203
+ > CLI](https://github.com/docker/scout-cli/) version 1.18.3 or later.
204
+
203
205
For example :
204
206
205
207
` ` ` console
206
- $ docker scout attest get \
207
- --predicate-type https://openvex.dev/ns/v0.2.0 \
208
- --predicate \
209
- docs/dhi-python:3.13 --platform linux/amd64 > vex.json
208
+ $ docker scout vex get docs/dhi-python:3.13 --output vex.json
210
209
` ` `
211
210
212
211
This creates a `vex.json` file containing the VEX statements for the specified
213
- image. You can then use this file with tools that support VEX to filter out known non-exploitable CVEs.
212
+ image. You can then use this file with tools that support VEX to filter out
213
+ known non-exploitable CVEs.
214
214
215
215
For example, with Grype and Trivy, you can use the `--vex` flag to apply the VEX
216
216
statements during the scan :
You can’t perform that action at this time.
0 commit comments