From bfb7056b8d1a4a8a8a265442e90ac64d3d5d1b05 Mon Sep 17 00:00:00 2001 From: ved pawar <85354558+vedpawar2254@users.noreply.github.com> Date: Sun, 12 Jan 2025 14:12:52 +0530 Subject: [PATCH 1/4] Fixed a few links in manual.md --- doc/MANUAL.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/doc/MANUAL.md b/doc/MANUAL.md index 69a738b2e3..a09fda0f1d 100644 --- a/doc/MANUAL.md +++ b/doc/MANUAL.md @@ -58,11 +58,11 @@ - [-A \[\-\\], --available-fix \[\-\\]](#-a-distro_name-distro_version_name---available-fix-distro_name-distro_version_name) - [-b \[\-\\], --backport-fix \[\-\\]](#-b-distro_name-distro_version_name---backport-fix-distro_name-distro_version_name) - [--affected-versions](#--affected-versions) - - [--sbom-output SBOM\_OUTPUT](#--sbom-output-sbom_output) + - [--vex-output VEX_OUTPUT](#--vex-output-vex_output) + - [--vex-type](#--vex-type) + - [--sbom-output SBOM_OUTPUT](#--sbom-output-sbom_output) - [--sbom-type](#--sbom-type) - [--sbom-format](#--sbom-format) - - [--vex-type](#--vex-type) - - [--vex-output VEX\_OUTPUT](#--vex-output) - [Output verbosity](#output-verbosity) - [Quiet Mode](#quiet-mode) - [Logging modes](#logging-modes) @@ -1348,7 +1348,7 @@ ubuntu-xenial This options reports the versions of a product affected by a given CVE. -### --vex-output VEX_FILE +### --vex-output VEX_OUTPUT This option allows you to specify the filename for a Vulnerability Exchange (VEX) file which contains all the reported vulnerabilities detected by the scan. This file is typically From 38772417cec19205c608b1cee9719a0b68c26b9e Mon Sep 17 00:00:00 2001 From: ved pawar <85354558+vedpawar2254@users.noreply.github.com> Date: Sat, 18 Jan 2025 00:00:32 +0530 Subject: [PATCH 2/4] Update MANUAL.md --- doc/MANUAL.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/doc/MANUAL.md b/doc/MANUAL.md index a09fda0f1d..cb1d8dbfe4 100644 --- a/doc/MANUAL.md +++ b/doc/MANUAL.md @@ -58,9 +58,9 @@ - [-A \[\-\\], --available-fix \[\-\\]](#-a-distro_name-distro_version_name---available-fix-distro_name-distro_version_name) - [-b \[\-\\], --backport-fix \[\-\\]](#-b-distro_name-distro_version_name---backport-fix-distro_name-distro_version_name) - [--affected-versions](#--affected-versions) - - [--vex-output VEX_OUTPUT](#--vex-output-vex_output) + - [--vex-output VEX_FILE](#--vex-file-vex_file) - [--vex-type](#--vex-type) - - [--sbom-output SBOM_OUTPUT](#--sbom-output-sbom_output) + - [--sbom-output SBOM_FILE](#--sbom-output-sbom_file) - [--sbom-type](#--sbom-type) - [--sbom-format](#--sbom-format) - [Output verbosity](#output-verbosity) @@ -1348,7 +1348,7 @@ ubuntu-xenial This options reports the versions of a product affected by a given CVE. -### --vex-output VEX_OUTPUT +### --vex-output VEX_FILE This option allows you to specify the filename for a Vulnerability Exchange (VEX) file which contains all the reported vulnerabilities detected by the scan. This file is typically @@ -1362,7 +1362,7 @@ type of Vulnerability Exploitability eXchange (VEX) to be generated. VEXs can be If this option is not specified, an CycloneDX VEX will be generated. -### --sbom-output SBOM_OUTPUT +### --sbom-output SBOM_FILE This option allows you to specify the filename for a Software Bill of Material (SBOM) file which contains all of the components detected by the scan. The generated file can be used as a subsequent input to the CVE Binary tool with `--sbom-file` parameter. From 3618bd7fed575367ef0d0c1ebc570e9c613d4896 Mon Sep 17 00:00:00 2001 From: ved pawar <85354558+vedpawar2254@users.noreply.github.com> Date: Tue, 21 Jan 2025 10:48:04 +0530 Subject: [PATCH 3/4] Update-2 MANUAL.md --- doc/MANUAL.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/MANUAL.md b/doc/MANUAL.md index cb1d8dbfe4..ba1915269c 100644 --- a/doc/MANUAL.md +++ b/doc/MANUAL.md @@ -177,7 +177,7 @@ which is useful if you're trying the latest code from -b [-], --backport-fix [-] Lists backported fixes if available from Linux distribution --affected-versions Lists versions of product affected by a given CVE (to facilitate upgrades) - --sbom-output SBOM_OUTPUT + --sbom-output SBOM_FILE Provide software bill of materials (sbom) filename to generate --sbom-type {spdx,cyclonedx} specify type of software bill of materials (sbom) to generate (default: spdx) @@ -187,7 +187,7 @@ which is useful if you're trying the latest code from Vex Output: Arguments related to Vex output document. - --vex-output VEX_OUTPUT + --vex-output VEX_FILE Provide vulnerability exploitability exchange (vex) filename to generate --vex-type {cyclonedx,csaf,openvex} specify type of vulnerability exploitability exchange (vex) to generate (default: cyclonedx) From ca5b16881a92d78c0ee95440757ea67af6dbb868 Mon Sep 17 00:00:00 2001 From: ved pawar <85354558+vedpawar2254@users.noreply.github.com> Date: Tue, 21 Jan 2025 11:07:04 +0530 Subject: [PATCH 4/4] Update README.md --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 43861ba093..8ce126ca94 100644 --- a/README.md +++ b/README.md @@ -496,7 +496,7 @@ Output: -b [-], --backport-fix [-] Lists backported fixes if available from Linux distribution --affected-versions Lists versions of product affected by a given CVE (to facilitate upgrades) - --sbom-output SBOM_OUTPUT + --sbom-output SBOM_FILE provide software bill of materials (sbom) filename to generate --sbom-type {spdx,cyclonedx} specify type of software bill of materials (sbom) to generate (default: spdx) @@ -506,7 +506,7 @@ Output: Vex Output: Arguments related to Vex output document. - --vex-ouptput VEX_OUTPUT + --vex-ouptput VEX_FILE Provide vulnerability exploitability exchange (vex) filename to generate --vex-type {cyclonedx, csaf, openvex} specify type of vulnerability exploitability exchange (vex) to generate (default: cyclonedx)