tag:github.com,2008:https://github.com/docker/scout-cli/releases 2026-03-05T09:14:17Z tag:github.com,2008:Repository/643438238/v1.20.2 2026-03-09T17:44:27Z <h2>What's Changed</h2> <ul> <li>Minor consistency fixes <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> </ul> docker-scout-ci[bot] tag:github.com,2008:Repository/643438238/v1.20.1 2026-03-06T10:41:02Z <h2>What's Changed</h2> <ul> <li>Fix VCS provenance parsing <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> </ul> chrispatrick tag:github.com,2008:Repository/643438238/v1.20.0 2026-02-24T12:24:49Z <h2>What's Changed</h2> <ul> <li>Documentation updates <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dvdksn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dvdksn">@dvdksn</a></li> <li>Fix vulnerabilities <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jpbriend/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jpbriend">@jpbriend</a></li> <li>Fix apk version handling <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Support SLSA v1 Provenance <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> <li>Update dependencies <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Fix Go purl versioning <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> chrispatrick tag:github.com,2008:Repository/643438238/v1.19.0 2025-12-16T08:37:26Z <h1>What's Changed</h1> <ul> <li>CVE fixes <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Update dependencies <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Documentation updates <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/craig-osterhout/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/craig-osterhout">@craig-osterhout</a></li> <li>Handle attestation source failures more gracefully <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> <li>Bug fixes including around VEX, versioning and indexing <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> chrispatrick tag:github.com,2008:Repository/643438238/v1.18.4 2025-10-02T16:23:15Z <h2>What's Changed</h2> <ul> <li>Docs updates <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/craig-osterhout/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/craig-osterhout">@craig-osterhout</a></li> <li>VEX and SPDX fixes <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> chrispatrick tag:github.com,2008:Repository/643438238/v1.18.3 2025-08-13T15:12:44Z <h2>What's Changed</h2> <ul> <li>Minor fixes for DHI by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Add <code>docker scout vex get</code> command to a get merged VEX document from all VEX attestations <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> cdupuis tag:github.com,2008:Repository/643438238/v1.18.2 2025-07-21T14:31:48Z <h2>What's Changed</h2> <ul> <li>Minor fixes for DHI by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Add <code>--skip-tlog</code> for <code>docker scout attest get</code> to skip signature verification against the transparency log by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Do not filter CVEs that are marked with a VEX <code>under_investigation</code> statement by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Add predicate type human names for DHI FIPS and STIG attestations by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> cdupuis tag:github.com,2008:Repository/643438238/v1.18.1 2025-05-26T13:22:15Z <h2>What's Changed</h2> <ul> <li>Fix issues with <code>attest list</code> and <code>attest get</code> for local images by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> cdupuis tag:github.com,2008:Repository/643438238/v1.18.0 2025-05-26T13:20:16Z <h2>What's Changed</h2> <ul> <li>Added <code>attest list</code> and <code>attest get</code> commands to list attestations by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Support for DHI VEX documents by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> cdupuis tag:github.com,2008:Repository/643438238/v1.17.1 2025-04-16T07:46:35Z <p>Merge <a class="commit-link" href="https://github.com/docker/scout-cli/commit/0ed26ff2995b5161e1f022ce0d4c8784f734e8ac"><tt>0ed26ff</tt></a> into <a class="commit-link" href="https://github.com/docker/scout-cli/commit/316180a8169b3d6904fb8d75ba0e603d3b8ed1ef"><tt>316180a</tt></a></p> github-actions[bot]