Skip to content

Commit 6be7004

Browse files
authored
docs: update list of features (#52)
Mention features covered by `assess_image` and `generate_sbom` commands.
1 parent 7afa44b commit 6be7004

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

README.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,12 +2,15 @@
22

33
An orb to facilitate security work within Studion CircleCI pipelines. Inspired by [ASH](https://github.com/awslabs/automated-security-helper).\
44
Key features:
5+
56
- Audit dependencies for vulnerabilities, supports npm or pnpm
67
- The default value of the package manager is picked from the environment
78
- Detect secret leaks on the changeset or target a directory
89
- Run a diff-aware static analysis tool to detect vulnerabilities
910
- Opt for a full scan of the codebase when needed
1011
- Scan Dockerfiles for configuration issues
12+
- Check Docker images for vulnerabilities and secrets
13+
- Generate Software Bill of Materials (SBOM) from Docker images
1114

1215
## Usage
1316

0 commit comments

Comments
 (0)