Fix Affected and Fixed Package information
Closed this issue · 2 comments
taechae commented
Fix Affected and Fixed Package information
taechae commented
Fixed for Grype.
Trivy does not provide this information.
Looks like Snyk does provide the information in isUpgradable/isPatchable but cannot find an example with the information populated.
mchmarny commented
Looks like trivy CLI does not outputs that field, even when there are upgradable vulns. This won't help, but the data/trivy.json sample in the repo is now for the Ruby app image which has many fixable vuls.