File tree Expand file tree Collapse file tree 2 files changed +35
-0
lines changed Expand file tree Collapse file tree 2 files changed +35
-0
lines changed Original file line number Diff line number Diff line change 1+ # OpenVEX Templates Directory
2+
3+ This directory contains the OpenVEX data for this repository.
4+ The files stored in this directory are used as templates by
5+ ` vexctl generate ` when generating VEX data for a release or
6+ a specific artifact.
7+
8+ To add new statements to publish data about a vulnerability,
9+ download [ vexctl] ( https://github.com/openvex/vexctl )
10+ and append new statements using ` vexctl add ` . For example:
11+ ```
12+ vexctl add --in-place main.openvex.json pkg:oci/test CVE-2014-1234567 fixed
13+ ```
14+ That will add a new VEX statement expressing that the impact of
15+ CVE-2014 -1234567 is under investigation in the test image. When
16+ cutting a new release, for ` pkg:oci/test ` the new file will be
17+ incorporated to the relase's VEX data.
18+
19+ ## Read more about OpenVEX
20+
21+ To know more about generating, publishing and using VEX data
22+ in your project, please check out the vexctl repository and
23+ documentation: https://github.com/openvex/vexctl
24+
25+ OpenVEX also has an examples repository with samples and docs:
26+ https://github.com/openvex/examples
27+
Original file line number Diff line number Diff line change 1+ {
2+ "@context" : " https://openvex.dev/ns/v0.2.0" ,
3+ "@id" : " https://openvex.dev/docs/public/vex-2912204db7d51d98234a931d600f7cc2dd0bf24a5b5b326de138d64b30c22911" ,
4+ "author" : " vexctl (automated template)" ,
5+ "timestamp" : " 2023-12-15T22:55:18.754525+05:30" ,
6+ "version" : 1 ,
7+ "statements" : []
8+ }
You can’t perform that action at this time.
0 commit comments