Abel Salgado Romero

At it again, to go baby steps and avoid breaking things I like the idea of having a weekly scheduled job running on the latest release from dockerhub. If it...

> The rationale is that these CVEs alerts must provide an actionable, or there are false positive indeed. If there are no actionable (e.g. not CRITICAL and no fix), then...

May be precipitate, but I just run grype locally and my first impression in not very positive. As you can see in the output is not classified by OS, Java,...

But still, the command should work right? It seems like maybe some metadata is not 100% accurate and DockerHub (which works) is making some fix under-the-hood.

Related to https://github.com/asciidoctor/docker-asciidoctor/issues/224, my first plan was pulling from cache to avoid network issues with dockerhub. But that's no longer the approach now.

**I prefer 2** (github needs a poll feature 😞 ). It could define a common semantic for other features and it tells the user that there are features available without...

I am not sure I understand the use of "user.dir" because I am getting some weird behaviour, and maybe this it is expected. I created a project to demo it....

Btw, when the script is not found no error or message is shown.

Thinking about it after sleep, the real issue is pre-loading the modules and being able to reference them somehow without parsing them again. With normal JS scripts I can "eval"...

> Could you provide a full reproducible code example (e.g., a self-contained test with your custom FS etc) Sure thing! I can prepare something later. Just for context, I just...