Matt Colman

Storing VAULT_TOKEN as environment variable - security concern?

4

I've been looking into use Cosign with Hashicorp Vault to avoid generating & storing keys locally or as Kubernetes secrets. Whilst digging into this, I've become aware that I would...

Windows 11 - WSL2 - Ubuntu 22

1

Hi, I've just installed this on Windows 11 WSL2 running Ubuntu 22. Here are the steps I followed: ``` # In Powershell wsl --update wsl --shutdown # In WSL2 Ubuntu...

Hi, just wanted to drop some feedback (great tool by the way). I've managed to take a look at the Trivy scanning results you provide, as per this image (for...

Using with podman in Ubuntu 22.04 WSL2 on Windows

7

Hi, I've installed 4.1.0-rc.28.p on Windows 10 (Version 21H2 (OS Build 19044.1706)) and I'm trying to run with Ubuntu (22.04) WSL2 (I am also experiencing the same issue with Ubuntu...

Delete old deferral requests

5

Hello, I'm trying to remove old deferral requests via the API: ``` curl -s -k -u admin:$acs_pass -X DELETE "https://localhost:8443/v1/cve/requests/$id" ``` However I get: ``` {"error":"cannot delete exception 6ee5ee7d-4b2c-402f-9903-b404c52f1df9. Only...

### Container platform OCP 4, Podman/Docker ### Version ubi8/nodejs-18-minimal ### OS version of the container image RHEL 8 ### Bugzilla, Jira _No response_ ### Description The ubi8/nodejs-18-minimal image references USER...

Install Tekton Pipelines - K8s version discrepancy?

1

This page `https://tekton.dev/docs/pipelines/install/` references: > A Kubernetes cluster running version 1.25 or later. However on releases (https://github.com/tektoncd/pipeline/releases) it says: > [Tekton Pipeline release v0.61.0 "Ragdoll Data"](https://github.com/tektoncd/pipeline/releases/tag/v0.61.0) > [T]he minimum Kubernetes...

Apply custom-detectors to specific file types (via inclusion or exclusion)

1

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ## Description Is it possible to apply regex detectors to specific filetypes? the main use case I have for this is that some...

Support negative lookahead assertions

4

## Description Apologies if this should be raised somewhere else - happy to move it if required. I've tried creating a config file with the following regex within it: ```...

[BUG] Watsonx as embedder is not working - script errors and stops

4

### Description I'm following https://docs.crewai.com/concepts/knowledge#embedder-configuration and it states: >Embedder Configuration >You can also configure the embedder for the knowledge store. This is useful if you want to use a different...