Hi Team,
Do we have plan to introduce CVSS 4.0 score in Grype? Kindly share the details.
We are definitely interested in adding other scores such as CVSS 4 and EPSS, but these and CVSS 3 are each slightly different with data potentially for different purposes as I understand it, so we would need to understand how to map these to, say, Grype’s severity or other summarized data points in order for these to be useful, I think.
Are there more specifics you’re interested in? I think it’s a great discussion; we’re always looking for ways to improve the tools.
I think trivy might publish this data in their tool, you can try and see how they mapped it