Comments (2)
Fixed for Grype.
Trivy does not provide this information.
Looks like Snyk does provide the information in isUpgradable/isPatchable but cannot find an example with the information populated.
from vimp.
Looks like trivy CLI does not outputs that field, even when there are upgradable vulns. This won't help, but the data/trivy.json sample in the repo is now for the Ruby app image which has many fixable vuls.
from vimp.
Related Issues (20)
- gcloud (beta container | artifacts docker) images describe --show-all-metadata does not show user-generated vulnerabilities HOT 1
- Review and refactor CVSS vs CVSS v3 HOT 2
- Refactor Notes to remove package issue information
- Why does data/snyk.json contain duplicate entries? HOT 2
- --project should be optional HOT 2
- Question about grype results
- Investigate if Grype matches need to be broken up into multiple vulnerabilities HOT 1
- Append https:// to resource_uri to be consistent with AA HOT 1
- Group PackageIssues into one Occurrence
- Update GCB builder docs with the latest screenshot
- Refactor convertOccurrence and convertNote to reuse common code
- Check into the number of vulnerabilities in vulctl image HOT 1
- Package type for Snyk and Trivvy not set HOT 3
- Create a mapping document between scanners and Container Analysis
- add support for osv-scanner reports
- add auto scan on import HOT 1
- strip url schema from image uris HOT 1
- diff only filter on query is broken HOT 1
- Add postgres support HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vimp.