VEX suppression broken in SBOM mode since v0.67.0 – missing component UIDs
VEX suppression broken in SBOM mode since v0.67.0 – missing component UIDs: a task in LegoFlow-SWE (Harbor dataset). When scanning an SBOM with trivy sbom and providing a VEX document for vulnerability suppression, filtering no longer works. Instead, multiple “Component not found” errors are…
The task
When scanning an SBOM with `trivy sbom` and providing a VEX document for vulnerability suppression, filtering no longer works. Instead, multiple “Component not found” errors are logged, and vulnerabilities that should be suppressed remain visible.
Part of Lego-X/LegoFlow-SWE.