Skip to content
Craftifact

Vulnerabilities

Vulnerability findings, prioritization signals, and suppressions in Craftifact.

Craftifact maps known vulnerabilities to the components and artifacts they affect.

Findings can be prioritized with scanner severity, CISA KEV, and EPSS signals. Suppressions can be created, renewed, or revoked where a risk is already accepted.

Vulnerability findings

  • Review vulnerabilities and affected components for an artifact or OCI digest
  • Create, renew, and revoke suppressions where the risk is already accepted