sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 62 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

docs: align tool inventory with what actually runs (no Grype, no ZAP/nuclei) (#233)
CI / Check (push) Canceled after 0s
Details
CI / Detect Changes (push) Canceled after 0s
Details
CI / Deploy Agent (push) Canceled after 0s
Details
CI / Deploy Dashboard (push) Canceled after 0s
Details
CI / Deploy Docs (push) Canceled after 0s
Details
CI / Deploy MCP (push) Canceled after 0s
Details

Browse Source
This commit was merged in pull request #233.
This commit is contained in:
sharang
2026-08-31 15:58:11 +00:00
parent 0834547a74
commit 53bd93c96e
7 changed files with 29 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/guide/sbom.md
+1 -1
View File
@@ -6,7 +6,7 @@ The SBOM (Software Bill of Materials) feature provides a complete inventory of a
A Software Bill of Materials is a list of every component (library, package, framework) that your software depends on, along with version numbers, licenses, and known vulnerabilities. SBOMs are increasingly required for compliance audits, customer security questionnaires, and supply chain transparency.
Certifai generates SBOMs automatically during each scan using Syft for dependency extraction and Grype for vulnerability matching.
Certifai generates SBOMs automatically during each scan using Syft for dependency extraction and OSV.dev + NVD for vulnerability matching.
## Packages Tab