Publish v1.4.0 release

docker · Feb 1, 2024 · 5b63c65 · 5b63c65
1 parent 990a37e
commit 5b63c65
Show file tree

Hide file tree

Showing 30 changed files with 172 additions and 45 deletions.
diff --git a/dist/docker-scout_1.3.0_checksums.txt b/dist/docker-scout_1.3.0_checksums.txt
diff --git a/dist/docker-scout_1.4.0_checksums.txt b/dist/docker-scout_1.4.0_checksums.txt
@@ -0,0 +1,6 @@
+c824408601740017f3ff389a73a3f51336e2fc27872e552eb0b72ba6fa47972e  docker-scout_1.4.0_darwin_amd64.tar.gz
+e737745b35c49240d61dc2bcdd126ad12c9423db5d729e7a833874259d1cac39  docker-scout_1.4.0_darwin_arm64.tar.gz
+a94933f057bd11297e9f7fe89d968951cad646f8cd68b8ac5a61178bd5450850  docker-scout_1.4.0_linux_amd64.tar.gz
+376f68b52d2259868da7601084d938b83f8fed088edf8d619949e2f8e2b80730  docker-scout_1.4.0_linux_arm64.tar.gz
+9edd1bafe981c6c7021e3d72648cea8b2e557727b158b2d20396504f7d1fb6c1  docker-scout_1.4.0_windows_amd64.zip
+db7c6eb682554c8c2279f25dfa1f38e714f0bd6125f9cc6059de9698e61ffbfd  docker-scout_1.4.0_windows_arm64.zip
diff --git a/dist/docker-scout_1.3.0_windows_amd64.zip → dist/docker-scout_1.4.0_darwin_amd64.tar.gz b/dist/docker-scout_1.3.0_windows_amd64.zip → dist/docker-scout_1.4.0_darwin_amd64.tar.gz
diff --git a/dist/docker-scout_1.3.0_linux_amd64.tar.gz → dist/docker-scout_1.4.0_darwin_arm64.tar.gz b/dist/docker-scout_1.3.0_linux_amd64.tar.gz → dist/docker-scout_1.4.0_darwin_arm64.tar.gz
diff --git a/dist/docker-scout_1.3.0_darwin_arm64.tar.gz → dist/docker-scout_1.4.0_linux_amd64.tar.gz b/dist/docker-scout_1.3.0_darwin_arm64.tar.gz → dist/docker-scout_1.4.0_linux_amd64.tar.gz
diff --git a/dist/docker-scout_1.3.0_windows_arm64.zip → dist/docker-scout_1.4.0_linux_arm64.tar.gz b/dist/docker-scout_1.3.0_windows_arm64.zip → dist/docker-scout_1.4.0_linux_arm64.tar.gz
diff --git a/dist/docker-scout_1.3.0_darwin_amd64.tar.gz → dist/docker-scout_1.4.0_windows_amd64.zip b/dist/docker-scout_1.3.0_darwin_amd64.tar.gz → dist/docker-scout_1.4.0_windows_amd64.zip
diff --git a/dist/docker-scout_1.3.0_linux_arm64.tar.gz → dist/docker-scout_1.4.0_windows_arm64.zip b/dist/docker-scout_1.3.0_linux_arm64.tar.gz → dist/docker-scout_1.4.0_windows_arm64.zip
diff --git a/docs/docker_scout.yaml b/docs/docker_scout.yaml
@@ -5,6 +5,7 @@ usage: docker scout [command]
 pname: docker
 plink: docker.yaml
 cname:
+    - docker scout attestation
     - docker scout cache
     - docker scout compare
     - docker scout config
@@ -19,6 +20,7 @@ cname:
     - docker scout repo
     - docker scout version
 clink:
+    - docker_scout_attestation.yaml
     - docker_scout_cache.yaml
     - docker_scout_compare.yaml
     - docker_scout_config.yaml

diff --git a/docs/docker_scout_attestation.yaml b/docs/docker_scout_attestation.yaml
@@ -0,0 +1,37 @@
+command: docker scout attestation
+aliases: docker scout attestation, docker scout attest
+short: Manage attestations on image indexes
+long: Manage attestations on image indexes
+pname: docker scout
+plink: docker_scout.yaml
+cname:
+    - docker scout attestation add
+clink:
+    - docker_scout_attestation_add.yaml
+inherited_options:
+    - option: debug
+      value_type: bool
+      default_value: "false"
+      description: Debug messages
+      deprecated: false
+      hidden: true
+      experimental: false
+      experimentalcli: false
+      kubernetes: false
+      swarm: false
+    - option: verbose-debug
+      value_type: bool
+      default_value: "false"
+      description: Verbose debug
+      deprecated: false
+      hidden: true
+      experimental: false
+      experimentalcli: false
+      kubernetes: false
+      swarm: false
+deprecated: false
+experimental: false
+experimentalcli: true
+kubernetes: false
+swarm: false
+
diff --git a/docs/docker_scout_attestation_add.yaml b/docs/docker_scout_attestation_add.yaml
@@ -0,0 +1,53 @@
+command: docker scout attestation add
+short: Add attestation to image
+long: The docker scout attestation add command adds attestations to images.
+usage: docker scout attestation add OPTIONS IMAGE [IMAGE...]
+pname: docker scout attestation
+plink: docker_scout_attestation.yaml
+options:
+    - option: file
+      value_type: stringSlice
+      default_value: '[]'
+      description: File location of attestations to attach
+      deprecated: false
+      hidden: false
+      experimental: false
+      experimentalcli: false
+      kubernetes: false
+      swarm: false
+    - option: predicate-type
+      value_type: string
+      description: Predicate-type for attestations
+      deprecated: false
+      hidden: false
+      experimental: false
+      experimentalcli: false
+      kubernetes: false
+      swarm: false
+inherited_options:
+    - option: debug
+      value_type: bool
+      default_value: "false"
+      description: Debug messages
+      deprecated: false
+      hidden: true
+      experimental: false
+      experimentalcli: false
+      kubernetes: false
+      swarm: false
+    - option: verbose-debug
+      value_type: bool
+      default_value: "false"
+      description: Verbose debug
+      deprecated: false
+      hidden: true
+      experimental: false
+      experimentalcli: false
+      kubernetes: false
+      swarm: false
+deprecated: false
+experimental: false
+experimentalcli: true
+kubernetes: false
+swarm: false
+
diff --git a/docs/docker_scout_compare.yaml b/docs/docker_scout_compare.yaml
@@ -178,7 +178,7 @@ options:
     - option: output
       shorthand: o
       value_type: string
-      description: Write the report to a file.
+      description: Write the report to a file
       deprecated: false
       hidden: false
       experimental: false
@@ -198,7 +198,7 @@ options:
       value_type: string
       description: |-
         Reference to use if the provided tarball contains multiple references.
-        Can only be used with archive.
+        Can only be used with archive
       deprecated: false
       hidden: false
       experimental: false

diff --git a/docs/docker_scout_cves.yaml b/docs/docker_scout_cves.yaml
@@ -218,7 +218,7 @@ options:
     - option: output
       shorthand: o
       value_type: string
-      description: Write the report to a file.
+      description: Write the report to a file
       deprecated: false
       hidden: false
       experimental: false
@@ -238,7 +238,7 @@ options:
       value_type: string
       description: |-
         Reference to use if the provided tarball contains multiple references.
-        Can only be used with archive.
+        Can only be used with archive
       deprecated: false
       hidden: false
       experimental: false

diff --git a/docs/docker_scout_environment.yaml b/docs/docker_scout_environment.yaml
@@ -28,7 +28,7 @@ options:
     - option: output
       shorthand: o
       value_type: string
-      description: Write the report to a file.
+      description: Write the report to a file
       deprecated: false
       hidden: false
       experimental: false

diff --git a/docs/docker_scout_push.yaml b/docs/docker_scout_push.yaml
@@ -27,7 +27,7 @@ options:
     - option: output
       shorthand: o
       value_type: string
-      description: Write the report to a file.
+      description: Write the report to a file
       deprecated: false
       hidden: false
       experimental: false

diff --git a/docs/docker_scout_quickview.yaml b/docs/docker_scout_quickview.yaml
@@ -66,7 +66,7 @@ options:
     - option: output
       shorthand: o
       value_type: string
-      description: Write the report to a file.
+      description: Write the report to a file
       deprecated: false
       hidden: false
       experimental: false
@@ -86,7 +86,7 @@ options:
       value_type: string
       description: |-
         Reference to use if the provided tarball contains multiple references.
-        Can only be used with archive.
+        Can only be used with archive
       deprecated: false
       hidden: false
       experimental: false

diff --git a/docs/docker_scout_recommendations.yaml b/docs/docker_scout_recommendations.yaml
@@ -66,7 +66,7 @@ options:
     - option: output
       shorthand: o
       value_type: string
-      description: Write the report to a file.
+      description: Write the report to a file
       deprecated: false
       hidden: false
       experimental: false
@@ -86,7 +86,7 @@ options:
       value_type: string
       description: |-
         Reference to use if the provided tarball contains multiple references.
-        Can only be used with archive.
+        Can only be used with archive
       deprecated: false
       hidden: false
       experimental: false

diff --git a/docs/docker_scout_sbom.yaml b/docs/docker_scout_sbom.yaml
@@ -65,7 +65,7 @@ options:
     - option: output
       shorthand: o
       value_type: string
-      description: Write the report to a file.
+      description: Write the report to a file
       deprecated: false
       hidden: false
       experimental: false
@@ -85,7 +85,7 @@ options:
       value_type: string
       description: |-
         Reference to use if the provided tarball contains multiple references.
-        Can only be used with archive.
+        Can only be used with archive
       deprecated: false
       hidden: false
       experimental: false

diff --git a/docs/docker_scout_stream.yaml b/docs/docker_scout_stream.yaml
@@ -20,7 +20,7 @@ options:
     - option: output
       shorthand: o
       value_type: string
-      description: Write the report to a file.
+      description: Write the report to a file
       deprecated: false
       hidden: false
       experimental: false

diff --git a/docs/scout.md b/docs/scout.md
@@ -11,6 +11,7 @@ Command line tool for Docker Scout
 
 | Name                                          | Description                                                                                 |
 |:----------------------------------------------|:--------------------------------------------------------------------------------------------|
+| [`attestation`](scout_attestation.md)         | Manage attestations on image indexes                                                        |
 | [`cache`](scout_cache.md)                     | Manage Docker Scout cache and temporary files                                               |
 | [`compare`](scout_compare.md)                 | Compare two images and display differences (experimental)                                   |
 | [`config`](scout_config.md)                   | Manage Docker Scout configuration                                                           |

diff --git a/docs/scout_attestation.md b/docs/scout_attestation.md
@@ -0,0 +1,19 @@
+# docker scout attestation
+
+<!---MARKER_GEN_START-->
+Manage attestations on image indexes
+
+### Aliases
+
+`docker scout attestation`, `docker scout attest`
+
+### Subcommands
+
+| Name                              | Description              |
+|:----------------------------------|:-------------------------|
+| [`add`](scout_attestation_add.md) | Add attestation to image |
+
+
+
+<!---MARKER_GEN_END-->
+
diff --git a/docs/scout_attestation_add.md b/docs/scout_attestation_add.md
@@ -0,0 +1,15 @@
+# docker scout attestation add
+
+<!---MARKER_GEN_START-->
+Add attestation to image
+
+### Options
+
+| Name               | Type          | Default | Description                             |
+|:-------------------|:--------------|:--------|:----------------------------------------|
+| `--file`           | `stringSlice` |         | File location of attestations to attach |
+| `--predicate-type` | `string`      |         | Predicate-type for attestations         |
+
+
+<!---MARKER_GEN_END-->
+
diff --git a/docs/scout_compare.md b/docs/scout_compare.md
@@ -23,9 +23,9 @@ Compare two images and display differences (experimental)
 | `--only-stage`        | `stringSlice` |         | Comma separated list of multi-stage Docker build stage names                                                                                                                   |
 | `--only-unfixed`      |               |         | Filter to unfixed CVEs                                                                                                                                                         |
 | `--org`               | `string`      |         | Namespace of the Docker organization                                                                                                                                           |
-| `-o`, `--output`      | `string`      |         | Write the report to a file.                                                                                                                                                    |
+| `-o`, `--output`      | `string`      |         | Write the report to a file                                                                                                                                                     |
 | `--platform`          | `string`      |         | Platform of image to analyze                                                                                                                                                   |
-| `--ref`               | `string`      |         | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive.                                                                       |
+| `--ref`               | `string`      |         | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive                                                                        |
 | `--to`                | `string`      |         | Image, directory, or archive to compare to                                                                                                                                     |
 | `--to-env`            | `string`      |         | Name of environment to compare to                                                                                                                                              |
 | `--to-latest`         |               |         | Latest image processed to compare to                                                                                                                                           |

diff --git a/docs/scout_cves.md b/docs/scout_cves.md
@@ -29,9 +29,9 @@ Display CVEs identified in a software artifact
 | `--only-vex-affected`  |               |            | Filter CVEs by VEX statements with status not affected                                                                                                                                                                                                                                                                 |
 | `--only-vuln-packages` |               |            | When used with --format=only-packages ignore packages with no vulnerabilities                                                                                                                                                                                                                                          |
 | `--org`                | `string`      |            | Namespace of the Docker organization                                                                                                                                                                                                                                                                                   |
-| `-o`, `--output`       | `string`      |            | Write the report to a file.                                                                                                                                                                                                                                                                                            |
+| `-o`, `--output`       | `string`      |            | Write the report to a file                                                                                                                                                                                                                                                                                             |
 | `--platform`           | `string`      |            | Platform of image to analyze                                                                                                                                                                                                                                                                                           |
-| `--ref`                | `string`      |            | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive.                                                                                                                                                                                                               |
+| `--ref`                | `string`      |            | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive                                                                                                                                                                                                                |
 | `--vex-author`         | `stringSlice` |            | List of VEX statement authors to accept                                                                                                                                                                                                                                                                                |
 | `--vex-location`       | `stringSlice` |            | File location of directory or file containing VEX statements                                                                                                                                                                                                                                                           |
 

diff --git a/docs/scout_environment.md b/docs/scout_environment.md
@@ -12,7 +12,7 @@ Manage environments (experimental)
 | Name             | Type     | Default | Description                          |
 |:-----------------|:---------|:--------|:-------------------------------------|
 | `--org`          | `string` |         | Namespace of the Docker organization |
-| `-o`, `--output` | `string` |         | Write the report to a file.          |
+| `-o`, `--output` | `string` |         | Write the report to a file           |
 | `--platform`     | `string` |         | Platform of image to record          |
 
 

diff --git a/docs/scout_push.md b/docs/scout_push.md
@@ -9,7 +9,7 @@ Push an image or image index to Docker Scout (experimental)
 |:-----------------|:---------|:--------|:-------------------------------------------------------------------|
 | `--author`       | `string` |         | Name of the author of the image                                    |
 | `--org`          | `string` |         | Namespace of the Docker organization to which image will be pushed |
-| `-o`, `--output` | `string` |         | Write the report to a file.                                        |
+| `-o`, `--output` | `string` |         | Write the report to a file                                         |
 | `--sbom`         |          |         | Create and upload SBOMs                                            |
 | `--timestamp`    | `string` |         | Timestamp of image or tag creation                                 |
 

diff --git a/docs/scout_quickview.md b/docs/scout_quickview.md
@@ -9,14 +9,14 @@ Quick overview of an image
 
 ### Options
 
-| Name             | Type     | Default | Description                                                                                              |
-|:-----------------|:---------|:--------|:---------------------------------------------------------------------------------------------------------|
-| `--env`          | `string` |         | Name of the environment                                                                                  |
-| `--latest`       |          |         | Latest indexed image                                                                                     |
-| `--org`          | `string` |         | Namespace of the Docker organization                                                                     |
-| `-o`, `--output` | `string` |         | Write the report to a file.                                                                              |
-| `--platform`     | `string` |         | Platform of image to analyze                                                                             |
-| `--ref`          | `string` |         | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive. |
+| Name             | Type     | Default | Description                                                                                             |
+|:-----------------|:---------|:--------|:--------------------------------------------------------------------------------------------------------|
+| `--env`          | `string` |         | Name of the environment                                                                                 |
+| `--latest`       |          |         | Latest indexed image                                                                                    |
+| `--org`          | `string` |         | Namespace of the Docker organization                                                                    |
+| `-o`, `--output` | `string` |         | Write the report to a file                                                                              |
+| `--platform`     | `string` |         | Platform of image to analyze                                                                            |
+| `--ref`          | `string` |         | Reference to use if the provided tarball contains multiple references.<br>Can only be used with archive |
 
 
 <!---MARKER_GEN_END-->