一款用 Go 写的安全扫描器,能查容器镜像、Kubernetes、代码仓库和云环境里的漏洞、配置错误和泄露密钥,还能生成 SBOM。
从容器镜像和文件系统生成软件物料清单(SBOM)的 CLI 工具与 Go 库,支持 CycloneDX 和 SPDX 格式,用于摸清镜像里到底装了哪些依赖。
扫描容器镜像和文件系统中的软件包,找出已知漏洞并输出 SBOM 与漏洞报告,适合接入 CI 做供应链安全把关。
Bitnami 维护的 Helm Charts 集合,用于在 Kubernetes 上快速部署数据库、中间件等常用服务,省去手写编排模板的麻烦。
ci: Fail Snyk's SBOM test only on findings the code does not mitigate Snyk applies no ignore to snyk sbom test : neither a .snyk file nor its organization policies, which
… no schema migration. Signed, notarized, stapled, SBOM-backed and provenance-attested.
…re in cvelistMetrics (or the advisory's epss[] on sbom audit ). Full changelog: https://github.com/vulnersCom/api/blob/master/CHANGELOG.md
…ct and any warnings for unsupported ones. - audit.sbom audit(..., cvelist metrics=True) — sent as a query option (the request body carries the uploaded file); the result
…up goreleaser configuration by removing redundant SBOM settings. d2134de8eab8c7b1a1bb900ebb47f0d7ead4cbdc feat: upgrade go version to 1.24.7 ( 130) by @mrtechit f1945010a
…g 56211bad5a53e7cbd64217ef87951de4c6e8b570 Remove sboms