sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 62 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

docs: align tool inventory with what actually runs (no Grype, no ZAP/nuclei) (#233)
CI / Check (push) Canceled after 0s
Details
CI / Detect Changes (push) Canceled after 0s
Details
CI / Deploy Agent (push) Canceled after 0s
Details
CI / Deploy Dashboard (push) Canceled after 0s
Details
CI / Deploy Docs (push) Canceled after 0s
Details
CI / Deploy MCP (push) Canceled after 0s
Details

Browse Source
This commit was merged in pull request #233.
This commit is contained in:
sharang
2026-08-31 15:58:11 +00:00
parent 0834547a74
commit 53bd93c96e
7 changed files with 29 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/glossary.md
+2 -2
View File
@@ -58,8 +58,8 @@ An open-source static analysis tool that finds bugs and enforces code standards
**Syft**
An open-source tool for generating SBOMs from container images and filesystems. Used by Certifai to extract dependency information.
**Grype**
An open-source vulnerability scanner for container images and filesystems. Used by Certifai to match dependencies against known vulnerabilities.
**OSV.dev**
Google's open distributed vulnerability database, queried by package URL. Certifai uses it (together with NVD) to match SBOM components against known vulnerabilities.
## Protocols