-
Notifications
You must be signed in to change notification settings - Fork 8.1k
dhi: add scanner integration #23952
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
dhi: add scanner integration #23952
Conversation
✅ Deploy Preview for docsdocker ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
126cfc7 to
90349ae
Compare
Bkblodget
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
made a few suggestions, overall looks great!
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
|
|
||
| ## Scanners with VEX support | ||
|
|
||
| The following are a few scanners that can read and apply the VEX attestations |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
How about "The following scanners can read and apply VEX attestations included with Docker Hardened Images to deliver more accurate vulnerability assessments:"
|
|
||
| ### Benefits of scanners with VEX support | ||
|
|
||
| Scanners that support open standards like OpenVEX and can read VEX attestations |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Suggestion: Scanners that support open standards like OpenVEX and can interpret VEX attestations from Docker Hardened Images offer the following benefits:
usha-mandya
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Left some minor suggestions. Looks good otherwise
Description
Added topic about scanner integrations and moved conceptual info from how to scan to that topic.
Refreshed how to scan and vex core concept topics.
Added wiz scan.
Related issues or tickets
ENGDOCS-3137
Reviews