container-cve-validator
Validate a CVE against a Red Hat container image using official SBOM attestations, Red Hat VEX data, and CVE metadata from MITRE/OSV.dev.
- License
- Apache-2.0
Pinned to revision adf960dda462, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/container-cve-validator/SKILL.md
- skills/container-cve-validator/references/01-vex-validation-procedure.md
- skills/container-cve-validator/references/02-report-template.md
- skills/container-cve-validator/scripts/download_sbom.py
- skills/container-cve-validator/scripts/fetch_coreos_metadata.py
- skills/container-cve-validator/scripts/fetch_cve_metadata.py
- skills/container-cve-validator/scripts/fetch_redhat_vex.py
- skills/container-cve-validator/scripts/fetch_rhsa_advisory.py
- skills/container-cve-validator/scripts/generate_sbom_syft.py
- skills/container-cve-validator/scripts/inspect_image.py
- skills/container-cve-validator/scripts/scan_newer_images.py
- skills/container-cve-validator/scripts/validate_input.py
Every link opens the file at its source, pinned to the revision this page describes.