anchore/grype v0.96.0

on GitHub

Added Features

• Added the EPSS score and KEV indications as CycloneDX vulnerabilities.ratings entries [#2695 #2765 @AlinaPodoba]

Bug Fixes

• The go run and go install broken due to useless redirect directive in go.mod [#2777 #2780 @stefanb]
• EPSS implementation using percentile instead of percent probability [#2778 #2785 @wagoodman]
• Latest version of grype with V6 schema lists incorrect URL for v6 database [#2513]

Additional Changes

• Add more detail around cataloging and DB load log statements [#2779 @wagoodman]
• add version set and combined constraint [#2763 @wagoodman]
• add v6 OS store [#2766 @wagoodman]

(Full Changelog)