Alex Goodman
Alex Goodman
Maybe a first pass would be to get this working with grype table/json output, and defer support for output with CycloneDX and others.
@popey pointed out that there are region locked snaps that fail with obtuse errors: ``` [0000] ERROR could not determine source: an error occurred attempting to resolve 'jp-ledger': snap: unable...
Merged with https://github.com/wagoodman/dive/pull/570, I'll preserve attribution in the upcoming changelog
Merged with #570, I'll preserve attribution in the upcoming changelog
> Should we totally dispense with the local registry and just push test images to a container registry somewhere? this would require that local development requires non local resources for...
Good call -- the v6 schema has a spot for this but it is not really leveraged yet, I'll update this table...
Open question: how can we get this information for unsupported versions (e.g. debian 7)?
We're planning on adding KEV and EPSS data to grype in the near future -- this will be unlocked by the grype DB v6 work in the near future (https://github.com/anchore/grype/issues/2128).
v6 will probably be released this week in which case this issue will be unblocked 🎉
Thanks for the reproduction steps -- yeah, we can keep diving on this 👍