chainguard.dev/vex (go): vexctl is a tool to attest VEX impact statements
Keywords: attestation|container|csaf|sarif|sbom|scanner|vex|vulnerability|vulnerability-detection