Comments (4)
@kmeekva, thanks for raising this. I can see that we are currently behind processing the RedHat advisory data. The required update is now in our data processing pipeline and will show up soon. I'll report back once we have confirmation that the data has been updated.
from scout-cli.
@kmeekva, the advisory data has now caught up and this CVE should not get reported any longer on your image. Would you be able confirm this by running the docker scout
command again?
from scout-cli.
@cdupuis, I can confirm it is no longer showing that as vulnerability.
Thanks for the quick attention to this.
Closing the issue.
from scout-cli.
👍🏽 Thanks for reporting back!
from scout-cli.
Related Issues (20)
- Docker scout ignores --force flag HOT 1
- Docker Scout does not honor Chainguard's advisory data/secdb HOT 2
- Image Analyze can't finish
- SPDX output into the file
- temporary file/cache location configurability HOT 11
- Non-JSON output with `--format sarif`
- Docker scout installation folder does not fit on Windows 11
- docker-scout in Jenkins is getting permission denied error HOT 4
- Docker scout false positive on [email protected] HOT 2
- docker scout skip not-fixed [feature request] HOT 2
- ERROR Status: could not get repositories for org <org_name>: could not list skills: failed to list integration configurations: 403 403 Forbidden, CodEe: 1 HOT 5
- Docker scout is misreading base image version number HOT 2
- Finding vulnerabilities in python pip packages HOT 3
- Change release names so that they can be matched with uname
- I cannot record an image to an environment (Windows) HOT 2
- docker scout fails on aarch64 HOT 6
- After update of Docker Desktop (4.27.0), cant scan any local image anymore HOT 7
- docker scout doesn't use proxy settings HOT 5
- docker scout could not get the image from cache HOT 6
- False positive when a *.deps.json file contains a dependency to a vulnerable package HOT 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from scout-cli.