themesd advisories enhanced
This commit is contained in:
@@ -24,6 +24,7 @@
|
||||
3. **Provenance**: Attestation/DSSE + build ancestry (image → layer → artifact → commit)
|
||||
4. **VEX/CSAF status**: affected/not-affected/under-investigation + reason
|
||||
5. **Diff**: SBOM or VEX delta since last scan (smart-diff)
|
||||
6. **Graph revision + receipt**: `graphRevisionId` plus the signed verdict receipt linking to upstream evidence (DSSE/Rekor when available)
|
||||
|
||||
## 3. KPIS
|
||||
|
||||
|
||||
Reference in New Issue
Block a user