klar
klar copied to clipboard
optiopay
Integration of Clair and Docker Registry
For KLAR_VERSION=2.4.0 For multi architecture images, that contain for instance arm64 and amd64 architectures, ``` docker buildx imagetools inspect private-registry/image/image:latest Name: private-registry/image/image:latest MediaType: application/vnd.docker.distribution.manifest.list.v2+json Digest: sha256:950664361b8bb941e7f8d4f5d44a6c26fb646ef865afb6f34ee89790bd39fcc6 Manifests: Name: private-registry/image/image:latest@sha256:ca3a9e73ff06f67a84fc5fd943d04d2fb13bf4f7d48accf8a54c8b040f789097 MediaType:...
### Brief: On January 9th Buildx v0.10 was released. The release notes included the following warning: Buildx v0.10 enables support for a minimal SLSA Provenance 1 attestation, which requires support...
**### Brief:** Some CVEs when created they have a unique defined vector and base score, However whenever there are any changes noticed for these CVEs, they could end with a...
This change allows specific CVEs to be whitelisted when they affect a specific feature. This is useful when a feature embeds a vulnerable component, but uses it in a way...
