nerdctl icon indicating copy to clipboard operation
nerdctl copied to clipboard
verified publisher icon containerd

Set up VEX to eliminate false-positives from vulnerability scanning tool results

Open AkihiroSuda opened this issue 3 years ago • 3 comments

e.g., https://github.com/CycloneDX/bom-examples/tree/master/VEX/Use-Cases/Case-4

For false positives like:

  • #1571

AkihiroSuda avatar Dec 01 '22 01:12 AkihiroSuda

Thanks for explanation.

Regards, Sachin. K.

its-sachink avatar Dec 01 '22 05:12 its-sachink

xref: https://github.com/kubernetes/kubernetes/issues/121454

dims avatar Oct 23 '23 19:10 dims

xref: https://github.com/kubernetes/sig-security/issues/116

ritazh avatar Jun 27 '24 23:06 ritazh