small polish

Signed-off-by: Craig <[email protected]>

Author: craig-osterhout

content/manuals/dhi/core-concepts/attestations.md

@@ -67,7 +67,7 @@ attestations that may be included with a DHI:
 |----------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------|
 | CycloneDX SBOM             | A software bill of materials in [CycloneDX](https://cyclonedx.org/) format, listing components, libraries, and versions.                                                                                                      | `https://cyclonedx.org/bom/v1.5`                  |
 | STIG scan                  | Results of a STIG scan, with output in HTML and XCCDF formats.                                                                                                                           | `https://docker.com/dhi/stig/v0.1`                |
-| CVEs (In-Toto format)      | A list of known vulnerabilities (CVEs) affecting the image's components, based on package and distro scanning.                                                                           | `https://in-toto.io/attestation/vulns/v0.1`       |
+| CVEs (In-Toto format)      | A list of known vulnerabilities (CVEs) affecting the image's components, based on package and distrobution scanning.                                                                           | `https://in-toto.io/attestation/vulns/v0.1`       |
 | VEX                        | A [Vulnerability Exploitability eXchange (VEX)](https://openvex.dev/) document that identifies vulnerabilities that do not apply to the image and explains why (e.g., not reachable or not present).                         | `https://openvex.dev/ns/v0.2.0`                   |
 | Scout health score         | A signed attestation from Docker Scout that summarizes the overall security and quality posture of the image.                                                                           | `https://scout.docker.com/health/v0.1`            |
 | Scout provenance           | Provenance metadata generated by Docker Scout, including the source Git commit, build parameters, and environment details.                                                               | `https://scout.docker.com/provenance/v0.1`        |