dhi: add scanner integration #23952
Draft
dhi: add scanner integration #23952
+259
−145
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
✅ Deploy Preview for docsdocker ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
craig-osterhout
force-pushed
the
engdocs-3137
branch
from
126cfc7 to
90349ae
Compare
Bkblodget
reviewed
Jan 13, 2026
Bkblodget
left a comment
Bkblodget
left a comment
There was a problem hiding this comment.
made a few suggestions, overall looks great!
| - Scanner flexibility: Switch between any VEX-enabled scanner (Docker Scout, | ||
| Trivy, Grype, etc.) without losing vulnerability context or rebuilding | ||
| exclusion lists. | ||
| - Consistent results: All VEX-enabled scanners interpret the same data the |
There was a problem hiding this comment.
I would remove "all" here.
"VEX-enabled scanners interpret the same data...."
| lists to replicate what VEX statements already document. | ||
| - Higher false positive rates: Expect to see more reported vulnerabilities | ||
| that don't represent real risks. | ||
| - Increased investigation time: Security teams spend time researching why |
There was a problem hiding this comment.
This may not be the right place, but when I read this bullet point, I was thinking we could add something like "security experts at docker manage this investigation for you, and thoroughly vet each justification before adding it to a VEX statement."
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Added topic about scanner integrations and moved conceptual info from how to scan to that topic.
Refreshed how to scan and vex core concept topics.
Pending Wiz updates.
Related issues or tickets
ENGDOCS-3137
Reviews