Benji Visser comments

Repositories
Issues
Comments

Results 53 comments of


                                            Benji Visser

Suppress Findings

this is a good idea. since we dont have a CVE or other stable ID like a vulnerability scanner, we could hijack our fingerprinting logic to use in suppressing findings...

Suppress Findings

Nope, not currently possible

xeol doesn't find postgres 12, but does find postgres 12-alpine

unfortunately this is one limitation of the scanner when I do a scan of the docker image using syft ``` syft postgres:12 -o cyclonedx-json > postgres12.json ``` I can see...