Lukas Krug

Support ingestion of CSAF documents

1

It would be nice to have the possibility of ingesting CSAF documents from upstream vendors. I think this would support the whole idea of "Vulnerability Exploitability **eXchange**" and it's very...

This change adds the ability to filter observations by the PURL type of the affected component. I found that helpful when trying to focus on, for example, only the RPM...

Added imagePullSecrets option for spilo pod

2

I wanted to deploy my own spilo image in a cluster, the image is hosted in a private registry. Therefore i added an option to specify imagePullSecrets for the pods...

Import of VEX statements from supply chain vendors

1

### Current Behavior: When a VEX file is imported, the observation status is updated if the vulnerability ID matches _and_ the VEX document references the product PURL. ### Feature Proposal...