Matthias Bertschy

Results 349 comments of Matthias Bertschy

@slashben can you check if you have somewhere a GitHub action creating vex?

@kfox1111 found it, maybe you can build something out of https://github.com/kubescape/generate-vex-action and send the VEX to dependencytrack?

@kfox1111 do you think something like a harbor scanner adapter (example https://github.com/anchore/harbor-scanner-adapter) would do it?

indeed... maybe if you `Always` pull and check the last pulled timestamp?

@xrstf can you take a look at the failing test?

great write, 100% correct regarding technicalities, thanks Sergey! /lgtm

Feature gate, does it mean a KEP is needed? Do we still consider it a bug then?