https://cybertoolchain.io/tools/dockerscan New releases and features in dockerscan, tracked by The Cyber Toolchain. en Mon, 13 Jul 2026 10:39:55 GMT https://github.com/cr0hn/dockerscan/releases/tag/v2.1.0 https://github.com/cr0hn/dockerscan/releases/tag/v2.1.0 Mon, 13 Jul 2026 10:39:55 GMT DockerScan v2.1.0 overhauls CVE detection with MITRE cvelistV5 (~125K CVEs), dpkg-accurate version matching, and optional NVD CVSS enrichment. • Switches CVE database source to MITRE cvelistV5 daily snapshots, eliminating NVD API keys and rate limits while growing coverage from ~1,500 to ~125,000 CVEs. • Rewrites package-to-CVE matching with a dpkg-style version comparator (Debian Policy 5.6.12) and per-(vendor, product) version ranges for accurate results. • Adds `vendor_verified` metadata to findings, distinguishing vendor-confirmed matches from heuristic name-only matches (which now include explicit remediation caveats). • Adds optional, non-blocking CVSS enrichment from the NVD API via `--enrich-from-nvd`, `--enrich-only`, and `--enrich-timeout` flags — NVD downtime never fails the build. • Expands vendor-verified package alias coverage with 11 new entries (gnu/coreutils, gnu/tar, gnu/sed, gnu/grep, gnu/gzip, gnu/findutils, busybox, musl-libc/musl, and more). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dockerscan https://github.com/cr0hn/dockerscan/releases/tag/v2.0.6 https://github.com/cr0hn/dockerscan/releases/tag/v2.0.6 Thu, 11 Jun 2026 15:46:34 GMT dockerscan v2.0.6 adds Docker credential helpers and verbose/debug flags • `--verbose` / `-v` flag shows scan progress including scanner status, image pull details, and per-scanner findings count to stderr. • `--debug` flag enables verbose output plus internal errors from failed sub-checks in CIS, supply chain, and runtime scanners. • Docker credential helper support via `credHelpers` (per-registry) and `credsStore` (global) configs for helpers like `docker-credential-osxkeychain`, `docker-credential-pass`, and `docker-credential-wincred`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dockerscan