When scanning a tag such as 'latest' (which typically is updated), the report produced is stale. My understanding is that the request to stackrox/acs should specify 'force' true to force a re-pull from the scanner instead of using cache.
I would argue that this should be the default, but could also settle with the option of specifying this in the pipeline.
When scanning a tag such as 'latest' (which typically is updated), the report produced is stale. My understanding is that the request to stackrox/acs should specify 'force' true to force a re-pull from the scanner instead of using cache.
I would argue that this should be the default, but could also settle with the option of specifying this in the pipeline.