Matthias Bertschy
Matthias Bertschy
@slashben can you check if you have somewhere a GitHub action creating vex?
@kfox1111 found it, maybe you can build something out of https://github.com/kubescape/generate-vex-action and send the VEX to dependencytrack?
@kfox1111 do you think something like a harbor scanner adapter (example https://github.com/anchore/harbor-scanner-adapter) would do it?
indeed... maybe if you `Always` pull and check the last pulled timestamp?
/ok-to-test
@xrstf can you take a look at the failing test?
great write, 100% correct regarding technicalities, thanks Sergey! /lgtm
Feature gate, does it mean a KEP is needed? Do we still consider it a bug then?
Exactly, so I suggest we change kind to feature and/or close that bug.