File tree Expand file tree Collapse file tree 1 file changed +7
-6
lines changed Expand file tree Collapse file tree 1 file changed +7
-6
lines changed Original file line number Diff line number Diff line change 2
2
3
3
This directory contains the OpenVEX data for this repository.
4
4
The files stored in this directory are used as templates by
5
- ` vexctl generate ` when generating VEX data for a release or
5
+ ` vexctl generate ` when generating VEX data for a release or
6
6
a specific artifact.
7
7
8
8
To add new statements to publish data about a vulnerability,
9
9
download [ vexctl] ( https://github.com/openvex/vexctl )
10
10
and append new statements using ` vexctl add ` . For example:
11
+
11
12
```
12
13
vexctl add --in-place main.openvex.json pkg:oci/test CVE-2014-1234567 fixed
13
14
```
15
+
14
16
That will add a new VEX statement expressing that the impact of
15
17
CVE-2014 -1234567 is under investigation in the test image. When
16
18
cutting a new release, for ` pkg:oci/test ` the new file will be
@@ -19,9 +21,8 @@ incorporated to the relase's VEX data.
19
21
## Read more about OpenVEX
20
22
21
23
To know more about generating, publishing and using VEX data
22
- in your project, please check out the vexctl repository and
23
- documentation: https://github.com/openvex/vexctl
24
-
25
- OpenVEX also has an examples repository with samples and docs:
26
- https://github.com/openvex/examples
24
+ in your project, please check out the [ vexctl repository and
25
+ documentation] ( https://github.com/openvex/vexctl ) .
27
26
27
+ OpenVEX also has an [ examples repository] ( https://github.com/openvex/examples )
28
+ with samples and docs.
You can’t perform that action at this time.
0 commit comments