Kubescape: the 1st open source project to support VEX Generation

Vulnerability Exploitability eXchange (VEX) is a document designed to complement a Software Bill of Materials (SBOM) and provide users with information about the applicability of vulnerability findings. While the adoption of VEX is increasing, sourcing reliable and accurate VEX documents remains a challenge. Kubescape, an open-source Kubernetes security platform, is the first project to support the generation of VEX documents. Kubescape uses its reachability feature to categorize vulnerabilities and produces VEX documents that can be integrated into vulnerability management workflows. Keeping VEX documents up-to-date is crucial for effective risk management.