CSAF VEX reports not available for certain container images in Bitnami Secure Images.

Products

• Bitnami Premium (Bitnami Secure Images)

Issue/Introduction

Certain container images in VMware BSI (Bitnami Secure Images) repository do no thave download option for CSAF (Common Security Advisory Framework) VEX (Vulnerability Exploitability eXchange) Reports.

When customer clicks on "My Catalog" on the left hand side of the Bitnami dashboard, there is no CSAF VEX report available.

Resolution

VEX assessments are only available for the hardened images (Photon-based images), not Debian. Hence Debian container images will not list VEX Reports as available in Bitnami dashboard.

Reference: Bitnami Reports Documentation