Suppress vulnerabilities applying Kubernetes context to scans

Automated excerpt

Vex8s generates VEX documents by correlating container vulnerabilities with Kubernetes settings to determine which CVEs are actually exploitable in your cluster. You can download the latest binary from the release page. passive-mode: passing an already generated vulnerability report created by trivy or grype. active-mode: actively scanning the images using trivy or grype engines and then gereating the document based on the results. trivy image --format json --output nginx. trivy. json nginx:1. 21. 0 vex8s generate --manifest examples/nginx. yaml --report nginx. trivy. json --output nginx. vex. json trivy image --vex nginx. vex. json --show-suppressed nginx:1. 21.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.