Merge pull request #19302 from dvdksn/vendor-scout-cli-1.4.1

vendor: github.com/docker/scout-cli v1.4.1
This commit is contained in:
David Karlsson 2024-02-03 22:29:31 +01:00 committed by GitHub
commit f039a73246
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
28 changed files with 202 additions and 41 deletions

View File

@ -5,6 +5,7 @@ usage: docker scout [command]
pname: docker pname: docker
plink: docker.yaml plink: docker.yaml
cname: cname:
- docker scout attestation
- docker scout cache - docker scout cache
- docker scout compare - docker scout compare
- docker scout config - docker scout config
@ -19,6 +20,7 @@ cname:
- docker scout repo - docker scout repo
- docker scout version - docker scout version
clink: clink:
- docker_scout_attestation.yaml
- docker_scout_cache.yaml - docker_scout_cache.yaml
- docker_scout_compare.yaml - docker_scout_compare.yaml
- docker_scout_config.yaml - docker_scout_config.yaml

View File

@ -0,0 +1,37 @@
command: docker scout attestation
aliases: docker scout attestation, docker scout attest
short: Manage attestations on image indexes
long: Manage attestations on image indexes
pname: docker scout
plink: docker_scout.yaml
cname:
- docker scout attestation add
clink:
- docker_scout_attestation_add.yaml
inherited_options:
- option: debug
value_type: bool
default_value: "false"
description: Debug messages
deprecated: false
hidden: true
experimental: false
experimentalcli: false
kubernetes: false
swarm: false
- option: verbose-debug
value_type: bool
default_value: "false"
description: Verbose debug
deprecated: false
hidden: true
experimental: false
experimentalcli: false
kubernetes: false
swarm: false
deprecated: false
experimental: false
experimentalcli: true
kubernetes: false
swarm: false

View File

@ -0,0 +1,53 @@
command: docker scout attestation add
short: Add attestation to image
long: The docker scout attestation add command adds attestations to images.
usage: docker scout attestation add OPTIONS IMAGE [IMAGE...]
pname: docker scout attestation
plink: docker_scout_attestation.yaml
options:
- option: file
value_type: stringSlice
default_value: '[]'
description: File location of attestations to attach
deprecated: false
hidden: false
experimental: false
experimentalcli: false
kubernetes: false
swarm: false
- option: predicate-type
value_type: string
description: Predicate-type for attestations
deprecated: false
hidden: false
experimental: false
experimentalcli: false
kubernetes: false
swarm: false
inherited_options:
- option: debug
value_type: bool
default_value: "false"
description: Debug messages
deprecated: false
hidden: true
experimental: false
experimentalcli: false
kubernetes: false
swarm: false
- option: verbose-debug
value_type: bool
default_value: "false"
description: Verbose debug
deprecated: false
hidden: true
experimental: false
experimentalcli: false
kubernetes: false
swarm: false
deprecated: false
experimental: false
experimentalcli: true
kubernetes: false
swarm: false

View File

@ -178,7 +178,7 @@ options:
- option: output - option: output
shorthand: o shorthand: o
value_type: string value_type: string
description: Write the report to a file. description: Write the report to a file
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false
@ -198,7 +198,7 @@ options:
value_type: string value_type: string
description: |- description: |-
Reference to use if the provided tarball contains multiple references. Reference to use if the provided tarball contains multiple references.
Can only be used with archive. Can only be used with archive
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false

View File

@ -218,7 +218,7 @@ options:
- option: output - option: output
shorthand: o shorthand: o
value_type: string value_type: string
description: Write the report to a file. description: Write the report to a file
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false
@ -238,7 +238,7 @@ options:
value_type: string value_type: string
description: |- description: |-
Reference to use if the provided tarball contains multiple references. Reference to use if the provided tarball contains multiple references.
Can only be used with archive. Can only be used with archive
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false

View File

@ -28,7 +28,7 @@ options:
- option: output - option: output
shorthand: o shorthand: o
value_type: string value_type: string
description: Write the report to a file. description: Write the report to a file
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false

View File

@ -27,7 +27,7 @@ options:
- option: output - option: output
shorthand: o shorthand: o
value_type: string value_type: string
description: Write the report to a file. description: Write the report to a file
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false

View File

@ -66,7 +66,7 @@ options:
- option: output - option: output
shorthand: o shorthand: o
value_type: string value_type: string
description: Write the report to a file. description: Write the report to a file
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false
@ -86,7 +86,7 @@ options:
value_type: string value_type: string
description: |- description: |-
Reference to use if the provided tarball contains multiple references. Reference to use if the provided tarball contains multiple references.
Can only be used with archive. Can only be used with archive
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false

View File

@ -66,7 +66,7 @@ options:
- option: output - option: output
shorthand: o shorthand: o
value_type: string value_type: string
description: Write the report to a file. description: Write the report to a file
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false
@ -86,7 +86,7 @@ options:
value_type: string value_type: string
description: |- description: |-
Reference to use if the provided tarball contains multiple references. Reference to use if the provided tarball contains multiple references.
Can only be used with archive. Can only be used with archive
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false

View File

@ -65,7 +65,7 @@ options:
- option: output - option: output
shorthand: o shorthand: o
value_type: string value_type: string
description: Write the report to a file. description: Write the report to a file
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false
@ -85,7 +85,7 @@ options:
value_type: string value_type: string
description: |- description: |-
Reference to use if the provided tarball contains multiple references. Reference to use if the provided tarball contains multiple references.
Can only be used with archive. Can only be used with archive
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false

View File

@ -20,7 +20,7 @@ options:
- option: output - option: output
shorthand: o shorthand: o
value_type: string value_type: string
description: Write the report to a file. description: Write the report to a file
deprecated: false deprecated: false
hidden: false hidden: false
experimental: false experimental: false

View File

@ -11,6 +11,7 @@ Command line tool for Docker Scout
| Name | Description | | Name | Description |
|:----------------------------------------------|:--------------------------------------------------------------------------------------------| |:----------------------------------------------|:--------------------------------------------------------------------------------------------|
| [`attestation`](scout_attestation.md) | Manage attestations on image indexes |
| [`cache`](scout_cache.md) | Manage Docker Scout cache and temporary files | | [`cache`](scout_cache.md) | Manage Docker Scout cache and temporary files |
| [`compare`](scout_compare.md) | Compare two images and display differences (experimental) | | [`compare`](scout_compare.md) | Compare two images and display differences (experimental) |
| [`config`](scout_config.md) | Manage Docker Scout configuration | | [`config`](scout_config.md) | Manage Docker Scout configuration |

View File

@ -0,0 +1,19 @@
# docker scout attestation
<!---MARKER_GEN_START-->
Manage attestations on image indexes
### Aliases
`docker scout attestation`, `docker scout attest`
### Subcommands
| Name | Description |
|:----------------------------------|:-------------------------|
| [`add`](scout_attestation_add.md) | Add attestation to image |
<!---MARKER_GEN_END-->

View File

@ -0,0 +1,15 @@
# docker scout attestation add
<!---MARKER_GEN_START-->
Add attestation to image
### Options
| Name | Type | Default | Description |
|:-------------------|:--------------|:--------|:----------------------------------------|
| `--file` | `stringSlice` | | File location of attestations to attach |
| `--predicate-type` | `string` | | Predicate-type for attestations |
<!---MARKER_GEN_END-->

View File

@ -23,9 +23,9 @@ Compare two images and display differences (experimental)
| `--only-stage` | `stringSlice` | | Comma separated list of multi-stage Docker build stage names | | `--only-stage` | `stringSlice` | | Comma separated list of multi-stage Docker build stage names |
| `--only-unfixed` | | | Filter to unfixed CVEs | | `--only-unfixed` | | | Filter to unfixed CVEs |
| `--org` | `string` | | Namespace of the Docker organization | | `--org` | `string` | | Namespace of the Docker organization |
| `-o`, `--output` | `string` | | Write the report to a file. | | `-o`, `--output` | `string` | | Write the report to a file |
| `--platform` | `string` | | Platform of image to analyze | | `--platform` | `string` | | Platform of image to analyze |
| `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive. | | `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive |
| `--to` | `string` | | Image, directory, or archive to compare to | | `--to` | `string` | | Image, directory, or archive to compare to |
| `--to-env` | `string` | | Name of environment to compare to | | `--to-env` | `string` | | Name of environment to compare to |
| `--to-latest` | | | Latest image processed to compare to | | `--to-latest` | | | Latest image processed to compare to |

View File

@ -29,9 +29,9 @@ Display CVEs identified in a software artifact
| `--only-vex-affected` | | | Filter CVEs by VEX statements with status not affected | | `--only-vex-affected` | | | Filter CVEs by VEX statements with status not affected |
| `--only-vuln-packages` | | | When used with --format=only-packages ignore packages with no vulnerabilities | | `--only-vuln-packages` | | | When used with --format=only-packages ignore packages with no vulnerabilities |
| `--org` | `string` | | Namespace of the Docker organization | | `--org` | `string` | | Namespace of the Docker organization |
| `-o`, `--output` | `string` | | Write the report to a file. | | `-o`, `--output` | `string` | | Write the report to a file |
| `--platform` | `string` | | Platform of image to analyze | | `--platform` | `string` | | Platform of image to analyze |
| `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive. | | `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive |
| `--vex-author` | `stringSlice` | | List of VEX statement authors to accept | | `--vex-author` | `stringSlice` | | List of VEX statement authors to accept |
| `--vex-location` | `stringSlice` | | File location of directory or file containing VEX statements | | `--vex-location` | `stringSlice` | | File location of directory or file containing VEX statements |

View File

@ -12,7 +12,7 @@ Manage environments (experimental)
| Name | Type | Default | Description | | Name | Type | Default | Description |
|:-----------------|:---------|:--------|:-------------------------------------| |:-----------------|:---------|:--------|:-------------------------------------|
| `--org` | `string` | | Namespace of the Docker organization | | `--org` | `string` | | Namespace of the Docker organization |
| `-o`, `--output` | `string` | | Write the report to a file. | | `-o`, `--output` | `string` | | Write the report to a file |
| `--platform` | `string` | | Platform of image to record | | `--platform` | `string` | | Platform of image to record |

View File

@ -9,7 +9,7 @@ Push an image or image index to Docker Scout (experimental)
|:-----------------|:---------|:--------|:-------------------------------------------------------------------| |:-----------------|:---------|:--------|:-------------------------------------------------------------------|
| `--author` | `string` | | Name of the author of the image | | `--author` | `string` | | Name of the author of the image |
| `--org` | `string` | | Namespace of the Docker organization to which image will be pushed | | `--org` | `string` | | Namespace of the Docker organization to which image will be pushed |
| `-o`, `--output` | `string` | | Write the report to a file. | | `-o`, `--output` | `string` | | Write the report to a file |
| `--sbom` | | | Create and upload SBOMs | | `--sbom` | | | Create and upload SBOMs |
| `--timestamp` | `string` | | Timestamp of image or tag creation | | `--timestamp` | `string` | | Timestamp of image or tag creation |

View File

@ -10,13 +10,13 @@ Quick overview of an image
### Options ### Options
| Name | Type | Default | Description | | Name | Type | Default | Description |
|:-----------------|:---------|:--------|:---------------------------------------------------------------------------------------------------------| |:-----------------|:---------|:--------|:--------------------------------------------------------------------------------------------------------|
| `--env` | `string` | | Name of the environment | | `--env` | `string` | | Name of the environment |
| `--latest` | | | Latest indexed image | | `--latest` | | | Latest indexed image |
| `--org` | `string` | | Namespace of the Docker organization | | `--org` | `string` | | Namespace of the Docker organization |
| `-o`, `--output` | `string` | | Write the report to a file. | | `-o`, `--output` | `string` | | Write the report to a file |
| `--platform` | `string` | | Platform of image to analyze | | `--platform` | `string` | | Platform of image to analyze |
| `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive. | | `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive |
<!---MARKER_GEN_END--> <!---MARKER_GEN_END-->

View File

@ -6,13 +6,13 @@ Display available base image updates and remediation recommendations
### Options ### Options
| Name | Type | Default | Description | | Name | Type | Default | Description |
|:-----------------|:---------|:--------|:---------------------------------------------------------------------------------------------------------| |:-----------------|:---------|:--------|:--------------------------------------------------------------------------------------------------------|
| `--only-refresh` | | | Only display base image refresh recommendations | | `--only-refresh` | | | Only display base image refresh recommendations |
| `--only-update` | | | Only display base image update recommendations | | `--only-update` | | | Only display base image update recommendations |
| `--org` | `string` | | Namespace of the Docker organization | | `--org` | `string` | | Namespace of the Docker organization |
| `-o`, `--output` | `string` | | Write the report to a file. | | `-o`, `--output` | `string` | | Write the report to a file |
| `--platform` | `string` | | Platform of image to analyze | | `--platform` | `string` | | Platform of image to analyze |
| `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive. | | `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive |
| `--tag` | `string` | | Specify tag | | `--tag` | `string` | | Specify tag |

View File

@ -9,9 +9,9 @@ Generate or display SBOM of an image
|:----------------------|:--------------|:--------|:----------------------------------------------------------------------------------------------------------------------------------------------| |:----------------------|:--------------|:--------|:----------------------------------------------------------------------------------------------------------------------------------------------|
| `--format` | `string` | `json` | Output format:<br>- list: list of packages of the image<br>- json: json representation of the SBOM<br>- spdx: spdx representation of the SBOM | | `--format` | `string` | `json` | Output format:<br>- list: list of packages of the image<br>- json: json representation of the SBOM<br>- spdx: spdx representation of the SBOM |
| `--only-package-type` | `stringSlice` | | Comma separated list of package types (like apk, deb, rpm, npm, pypi, golang, etc)<br>Can only be used with --format list | | `--only-package-type` | `stringSlice` | | Comma separated list of package types (like apk, deb, rpm, npm, pypi, golang, etc)<br>Can only be used with --format list |
| `-o`, `--output` | `string` | | Write the report to a file. | | `-o`, `--output` | `string` | | Write the report to a file |
| `--platform` | `string` | | Platform of image to analyze | | `--platform` | `string` | | Platform of image to analyze |
| `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive. | | `--ref` | `string` | | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive |
<!---MARKER_GEN_END--> <!---MARKER_GEN_END-->

View File

@ -8,7 +8,7 @@ Manage streams (experimental)
| Name | Type | Default | Description | | Name | Type | Default | Description |
|:-----------------|:---------|:--------|:-------------------------------------| |:-----------------|:---------|:--------|:-------------------------------------|
| `--org` | `string` | | Namespace of the Docker organization | | `--org` | `string` | | Namespace of the Docker organization |
| `-o`, `--output` | `string` | | Write the report to a file. | | `-o`, `--output` | `string` | | Write the report to a file |
| `--platform` | `string` | | Platform of image to record | | `--platform` | `string` | | Platform of image to record |

View File

@ -1,6 +1,6 @@
# github.com/moby/moby v25.0.3-0.20240203133757-341a7978a541+incompatible # github.com/moby/moby v25.0.3-0.20240203133757-341a7978a541+incompatible
# github.com/moby/buildkit v0.13.0-beta3.0.20240201135300-d906167d0b34 # github.com/moby/buildkit v0.13.0-beta3.0.20240201135300-d906167d0b34
# github.com/docker/buildx v0.12.2-0.20240126114058-d43cf8c2c6b4 # github.com/docker/buildx v0.12.2-0.20240126114058-d43cf8c2c6b4
# github.com/docker/scout-cli v1.3.0 # github.com/docker/scout-cli v1.4.1
# github.com/docker/cli v25.0.1+incompatible # github.com/docker/cli v25.0.1+incompatible
# github.com/docker/compose/v2 v2.24.5 # github.com/docker/compose/v2 v2.24.5

View File

@ -0,0 +1,14 @@
---
datafolder: scout-cli
datafile: docker_scout_attestation
title: docker scout attestation
layout: cli
---
<!--
This page is automatically generated from Docker's source code. If you want to
suggest a change to the text that appears here, open a ticket in the source
repository on GitHub:
https://github.com/docker/scout-cli
-->

View File

@ -0,0 +1,14 @@
---
datafolder: scout-cli
datafile: docker_scout_attestation_add
title: docker scout attestation add
layout: cli
---
<!--
This page is automatically generated from Docker's source code. If you want to
suggest a change to the text that appears here, open a ticket in the source
repository on GitHub:
https://github.com/docker/scout-cli
-->

View File

@ -621,6 +621,10 @@ Reference:
section: section:
- path: /engine/reference/commandline/scout/ - path: /engine/reference/commandline/scout/
title: docker scout title: docker scout
- path: /engine/reference/commandline/scout_attestation/
title: docker scout attestation
- path: /engine/reference/commandline/scout_attestation_add/
title: docker scout attestation add
- path: /engine/reference/commandline/scout_cache/ - path: /engine/reference/commandline/scout_cache/
title: docker scout cache title: docker scout cache
- path: /engine/reference/commandline/scout_cache_df/ - path: /engine/reference/commandline/scout_cache_df/

2
go.mod
View File

@ -8,7 +8,7 @@ require (
github.com/docker/buildx v0.12.2-0.20240126114058-d43cf8c2c6b4 // indirect github.com/docker/buildx v0.12.2-0.20240126114058-d43cf8c2c6b4 // indirect
github.com/docker/cli v25.0.1+incompatible // indirect github.com/docker/cli v25.0.1+incompatible // indirect
github.com/docker/compose/v2 v2.24.5 // indirect github.com/docker/compose/v2 v2.24.5 // indirect
github.com/docker/scout-cli v1.3.0 // indirect github.com/docker/scout-cli v1.4.1 // indirect
github.com/moby/buildkit v0.13.0-beta3.0.20240201135300-d906167d0b34 // indirect github.com/moby/buildkit v0.13.0-beta3.0.20240201135300-d906167d0b34 // indirect
github.com/moby/moby v25.0.3-0.20240203133757-341a7978a541+incompatible // indirect github.com/moby/moby v25.0.3-0.20240203133757-341a7978a541+incompatible // indirect
) )

2
go.sum
View File

@ -135,6 +135,8 @@ github.com/docker/scout-cli v1.2.0 h1:cjtsf7s2f6NO9OxgXWPW3DGxaTKVU58JKmVtaVMc0R
github.com/docker/scout-cli v1.2.0/go.mod h1:Eo1RyCJsx3ldz/YTY5yGxu9g9mwTYbRUutxQUkow3Fc= github.com/docker/scout-cli v1.2.0/go.mod h1:Eo1RyCJsx3ldz/YTY5yGxu9g9mwTYbRUutxQUkow3Fc=
github.com/docker/scout-cli v1.3.0 h1:mL9y1yB/DR/dAar71z0w8u8et9o2272Mrjxtb59ds3M= github.com/docker/scout-cli v1.3.0 h1:mL9y1yB/DR/dAar71z0w8u8et9o2272Mrjxtb59ds3M=
github.com/docker/scout-cli v1.3.0/go.mod h1:Eo1RyCJsx3ldz/YTY5yGxu9g9mwTYbRUutxQUkow3Fc= github.com/docker/scout-cli v1.3.0/go.mod h1:Eo1RyCJsx3ldz/YTY5yGxu9g9mwTYbRUutxQUkow3Fc=
github.com/docker/scout-cli v1.4.1 h1:jRHO3LI3x2eMrvObKC6uadoRATbwZSXm1NafSzo9Cu4=
github.com/docker/scout-cli v1.4.1/go.mod h1:Eo1RyCJsx3ldz/YTY5yGxu9g9mwTYbRUutxQUkow3Fc=
github.com/elazarl/goproxy v0.0.0-20191011121108-aa519ddbe484/go.mod h1:Ro8st/ElPeALwNFlcTpWmkr6IoMFfkjXAvTHpevnDsM= github.com/elazarl/goproxy v0.0.0-20191011121108-aa519ddbe484/go.mod h1:Ro8st/ElPeALwNFlcTpWmkr6IoMFfkjXAvTHpevnDsM=
github.com/evanphx/json-patch v4.9.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk= github.com/evanphx/json-patch v4.9.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4= github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=