sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 64 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

docs: rebrand Certifai → Prüfwerk (user-facing name) (#243)
CI / Check (push) Skipped
Details
CI / Detect Changes (push) Successful in 3s
Details
CI / Deploy Agent (push) Skipped
Details
CI / Deploy Dashboard (push) Skipped
Details
CI / Deploy MCP (push) Skipped
Details
CI / Deploy Docs (push) Successful in 1m13s
Details

Browse Source
This commit was merged in pull request #243.
This commit is contained in:
sharang
2026-09-02 08:00:12 +00:00
parent e0c54c4659
commit 710fdcab6f
15 changed files with 59 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/glossary.md
+9 -9
View File
@@ -1,11 +1,11 @@
# Glossary
A reference of key terms used throughout Certifai.
A reference of key terms used throughout Prüfwerk.
## Security Terms
**SAST (Static Application Security Testing)**
Analysis of source code to find vulnerabilities without running the application. Certifai uses Semgrep for SAST scanning.
Analysis of source code to find vulnerabilities without running the application. Prüfwerk uses Semgrep for SAST scanning.
**DAST (Dynamic Application Security Testing)**
Testing a running application by sending crafted requests and analyzing responses. Finds vulnerabilities that only appear at runtime.
@@ -45,26 +45,26 @@ A license that allows broad freedom to use, modify, and distribute software with
## Standards and Formats
**CycloneDX**
An OWASP standard for SBOM formats. Certifai supports export in CycloneDX 1.5 JSON format.
An OWASP standard for SBOM formats. Prüfwerk supports export in CycloneDX 1.5 JSON format.
**SPDX (Software Package Data Exchange)**
A Linux Foundation standard for communicating software bill of materials information. Certifai supports export in SPDX 2.3 format.
A Linux Foundation standard for communicating software bill of materials information. Prüfwerk supports export in SPDX 2.3 format.
## Tools
**Semgrep**
An open-source static analysis tool that finds bugs and enforces code standards using pattern-matching rules. Used by Certifai for SAST scanning.
An open-source static analysis tool that finds bugs and enforces code standards using pattern-matching rules. Used by Prüfwerk for SAST scanning.
**Syft**
An open-source tool for generating SBOMs from container images and filesystems. Used by Certifai to extract dependency information.
An open-source tool for generating SBOMs from container images and filesystems. Used by Prüfwerk to extract dependency information.
**OSV.dev**
Google's open distributed vulnerability database, queried by package URL. Certifai uses it (together with NVD) to match SBOM components against known vulnerabilities.
Google's open distributed vulnerability database, queried by package URL. Prüfwerk uses it (together with NVD) to match SBOM components against known vulnerabilities.
## Protocols
**MCP (Model Context Protocol)**
An open standard that allows LLM-powered tools to connect to external data sources and call tools. Certifai exposes security data through MCP so AI assistants can query findings, SBOMs, and DAST results.
An open standard that allows LLM-powered tools to connect to external data sources and call tools. Prüfwerk exposes security data through MCP so AI assistants can query findings, SBOMs, and DAST results.
**PKCE (Proof Key for Code Exchange)**
An extension to the OAuth 2.0 authorization code flow that prevents authorization code interception attacks. Used in Certifai's authentication flow.
An extension to the OAuth 2.0 authorization code flow that prevents authorization code interception attacks. Used in Prüfwerk's authentication flow.