tag:github.com,2008:https://github.com/docker/scout-cli/releases 2026-04-08T08:01:04Z tag:github.com,2008:Repository/643438238/v1.21.0 2026-05-19T17:16:12Z <h2>What's Changed</h2> <ul> <li>Fix local DHI-derived image handling, including inherited VEX and quickview base-image display</li> <li>Improve SBOM package qualifier handling, including DHI distro qualifiers</li> <li>Update dependencies and Go toolchain</li> </ul> docker-scout-ci[bot] tag:github.com,2008:Repository/643438238/v1.20.4 2026-04-08T08:08:09Z <h2>What's Changed</h2> <ul> <li>Add JSON output format for docker scout compare <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/benja-M-1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/benja-M-1">@benja-M-1</a></li> <li>Add image config field changes to docker scout compare output <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/benja-M-1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/benja-M-1">@benja-M-1</a></li> <li>Fix Docker Desktop proxy detection in WSL2 environments <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/benja-M-1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/benja-M-1">@benja-M-1</a></li> <li>Update dependencies <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/benja-M-1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/benja-M-1">@benja-M-1</a></li> </ul> docker-scout-ci[bot] tag:github.com,2008:Repository/643438238/v1.20.3 2026-03-20T12:06:54Z <h2>What's Changed</h2> <ul> <li>Improve retries of temporary and network errors <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> <li>Fix handling of dockerfiles included in provenance attestations <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> <li>Fix handling of cosign sig tags <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> <li>Use Docker Desktop HTTP proxy transport when available <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/benja-M-1/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/benja-M-1">@benja-M-1</a></li> </ul> docker-scout-ci[bot] tag:github.com,2008:Repository/643438238/v1.20.2 2026-03-09T17:44:27Z <h2>What's Changed</h2> <ul> <li>Minor consistency fixes <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> </ul> docker-scout-ci[bot] tag:github.com,2008:Repository/643438238/v1.20.1 2026-03-06T10:41:02Z <h2>What's Changed</h2> <ul> <li>Fix VCS provenance parsing <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> </ul> chrispatrick tag:github.com,2008:Repository/643438238/v1.20.0 2026-02-24T12:24:49Z <h2>What's Changed</h2> <ul> <li>Documentation updates <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dvdksn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dvdksn">@dvdksn</a></li> <li>Fix vulnerabilities <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jpbriend/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jpbriend">@jpbriend</a></li> <li>Fix apk version handling <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Support SLSA v1 Provenance <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> <li>Update dependencies <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Fix Go purl versioning <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> chrispatrick tag:github.com,2008:Repository/643438238/v1.19.0 2025-12-16T08:37:26Z <h1>What's Changed</h1> <ul> <li>CVE fixes <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Update dependencies <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Documentation updates <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/craig-osterhout/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/craig-osterhout">@craig-osterhout</a></li> <li>Handle attestation source failures more gracefully <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chrispatrick/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/chrispatrick">@chrispatrick</a></li> <li>Bug fixes including around VEX, versioning and indexing <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> chrispatrick tag:github.com,2008:Repository/643438238/v1.18.4 2025-10-02T16:23:15Z <h2>What's Changed</h2> <ul> <li>Docs updates <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/craig-osterhout/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/craig-osterhout">@craig-osterhout</a></li> <li>VEX and SPDX fixes <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> chrispatrick tag:github.com,2008:Repository/643438238/v1.18.3 2025-08-13T15:12:44Z <h2>What's Changed</h2> <ul> <li>Minor fixes for DHI by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Add <code>docker scout vex get</code> command to a get merged VEX document from all VEX attestations <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> cdupuis tag:github.com,2008:Repository/643438238/v1.18.2 2025-07-21T14:31:48Z <h2>What's Changed</h2> <ul> <li>Minor fixes for DHI by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Add <code>--skip-tlog</code> for <code>docker scout attest get</code> to skip signature verification against the transparency log by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Do not filter CVEs that are marked with a VEX <code>under_investigation</code> statement by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> <li>Add predicate type human names for DHI FIPS and STIG attestations by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cdupuis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cdupuis">@cdupuis</a></li> </ul> cdupuis