Skip to content

Commit 5a16b52

Browse files
authored
Merge pull request #7 from mathieu-benoit/patch-1
05-compliance - remove `--platform linux/arm64`
2 parents 63a4be6 + 6695991 commit 5a16b52

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

.labspace/05-compliance.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ To verify the security posture using an external scanning tool you already use,
6363

6464
First, you can view the list of available attestations for the DHI-based image using the `docker scout attest` command:
6565
```bash
66-
docker scout attest list $$orgname$$/demo-node-dhi:v1 --platform linux/arm64
66+
docker scout attest list $$orgname$$/demo-node-dhi:v1
6767
```
6868

6969
You'll see two OpenVEX files: one for the DHI base image and another for any custom exceptions (like no-dsa) specific to your image.
@@ -74,4 +74,4 @@ Then, to integrate this information with external tools, you can export the VEX
7474
docker scout vex get $$orgname$$/demo-node-dhi:v1 --output vex.json
7575
```
7676

77-
This generates a `vex.json` file containing all VEX statements for the specified image. Tools that support VEX can then use this file to suppress known non-exploitable CVEs.
77+
This generates a `vex.json` file containing all VEX statements for the specified image. Tools that support VEX can then use this file to suppress known non-exploitable CVEs.

0 commit comments

Comments
 (0)