What's Changed

• Prevents empty VEX documents from breaking scanning @flyingmachine
• Rego policy sources can be served via http(s) through --policy-file @cdupuis
• Performance improvements on SBOM fetching and policies evaluation @cdupuis

What's Changed

• Proxies Trivy's Java DB download through Docker Desktop's HTTP proxy transport @AndreSilva1993

What's Changed

• Fix local DHI-derived image handling, including inherited VEX and quickview base-image display
• Improve SBOM package qualifier handling, including DHI distro qualifiers
• Update dependencies and Go toolchain

What's Changed

• Add JSON output format for docker scout compare @benja-M-1
• Add image config field changes to docker scout compare output @benja-M-1
• Fix Docker Desktop proxy detection in WSL2 environments @benja-M-1
• Update dependencies @benja-M-1

What's Changed

• Improve retries of temporary and network errors @chrispatrick
• Fix handling of dockerfiles included in provenance attestations @chrispatrick
• Fix handling of cosign sig tags @chrispatrick
• Use Docker Desktop HTTP proxy transport when available @benja-M-1

What's Changed

• Minor consistency fixes @chrispatrick

What's Changed

• Fix VCS provenance parsing @chrispatrick

What's Changed

• Documentation updates @dvdksn
• Fix vulnerabilities @jpbriend
• Fix apk version handling @cdupuis
• Support SLSA v1 Provenance @chrispatrick
• Update dependencies @cdupuis
• Fix Go purl versioning @cdupuis

What's Changed

• CVE fixes @cdupuis
• Update dependencies @cdupuis
• Documentation updates @craig-osterhout
• Handle attestation source failures more gracefully @chrispatrick
• Bug fixes including around VEX, versioning and indexing @cdupuis

What's Changed

• Docs updates @craig-osterhout
• VEX and SPDX fixes @cdupuis