scout_compare
Compare two container images and report their CVE differences to assess security impact between versions.
Instructions
Compare two image references and report the CVE delta.
Exactly one of to, to_env, or to_latest=True must be supplied to identify
the comparison target.
args:
image - The new / candidate image reference
to - Compare against this image reference, directory, or archive
to_env - Compare against an image associated with this Scout environment
to_latest - Compare against the latest scan of image
only_severity - Filter to severities ("critical", "high", "medium", "low", "unspecified")
ignore_unchanged - Exclude unchanged packages from the diff
format - Output format: "json" (default), "markdown", or "text"
platform - Platform of the image to analyze
returns: dict - {"format": , "result": ,
"raw": }
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | ||
| image | Yes | ||
| format | No | json | |
| to_env | No | ||
| platform | No | ||
| to_latest | No | ||
| only_severity | No | ||
| ignore_unchanged | No |