We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 7afa44b commit 6be7004Copy full SHA for 6be7004
README.md
@@ -2,12 +2,15 @@
2
3
An orb to facilitate security work within Studion CircleCI pipelines. Inspired by [ASH](https://github.com/awslabs/automated-security-helper).\
4
Key features:
5
+
6
- Audit dependencies for vulnerabilities, supports npm or pnpm
7
- The default value of the package manager is picked from the environment
8
- Detect secret leaks on the changeset or target a directory
9
- Run a diff-aware static analysis tool to detect vulnerabilities
10
- Opt for a full scan of the codebase when needed
11
- Scan Dockerfiles for configuration issues
12
+- Check Docker images for vulnerabilities and secrets
13
+- Generate Software Bill of Materials (SBOM) from Docker images
14
15
## Usage
16
0 commit comments