How-to guides

Get and use the security evidence Putki publishes, with your own tools.

📄️ Use the VEX file with your scanner

Download the OpenVEX file for your Putki edition and release, and let Trivy or Grype drop the findings Putki has already assessed.

📄️ Get the SBOM for your release

Download the CycloneDX software bill of materials for every Putki image and plugins archive in your edition and release, and check it against what you run.