Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
Full Changelog: https://github.com/johnsonshi/image-layer-provenance/compare/v0.0.2...v0.0.3
Full Changelog: https://github.com/johnsonshi/image-manifest-layer-history/compare/v0.0.1...v0.0.2
Full Changelog: https://github.com/johnsonshi/image-manifest-layer-history/commits/v0.0.1