v1.18.2

What's Changed

• Minor fixes for DHI by @cdupuis
• Add --skip-tlog for docker scout attest get to skip signature verification against the transparency log by @cdupuis
• Do not filter CVEs that are marked with a VEX under_investigation statement by @cdupuis
• Add predicate type human names for DHI FIPS and STIG attestations by @cdupuis

v1.18.1

What's Changed

• Fix issues with attest list and attest get for local images by @cdupuis

v1.18.0

What's Changed

• Added attest list and attest get commands to list attestations by @cdupuis
• Support for DHI VEX documents by @cdupuis

v1.17.1

Merge 0ed26ff2995b5161e1f022ce0d4c8784f734e8ac into 316180a8169b3d690…

v1.17.0

Merge 06950db6f2ad31441a4c4de8d9a8f77e49939278 into 7c7e97734176f1bb6…

v1.16.3

Merge 9d83a0e466620fe314516a67fd5c25a555a0f0eb into 127b463cf08f9854d…

v1.16.2

Merge b2b49dd0f4f5ab8072365d3891136ff93dc4ea12 into d86161fc267f472f1…

v1.16.1

What's Changed

• Fix in-toto subject digest for the docker scout attestation add command by @cdupuis

v1.16.0

What's Changed

• Add secret scanning to sbom command by @cdupuis
• Keep original pattern to find nested matches too by @cdupuis
• Make licenses unqiue by @cdupuis
• Print platform in markdown output by @cdupuis
• Normalize licenses using spdx license list by @cdupuis
• Updates to make spdx output spec compliant by @cdupuis
• Check dir exists before creating temp file by @chrispatrick
• Update Go, crypto module and alpine by @cdupuis
• Add support for attestations for images from Tanzu Application Catalog by @cdupuis
• Fix behaviour with multi images in attest cmd by @cdupuis

v1.15.1

What's Changed

• Bug fixes by @cdupuis

New Contributors

• @neilprosser made their first contribution