Repository navigation
Quick Start Guide
What does this action do?
A GitHub Action that automatically scans your project with Trivy to:
- ✅ Detect all your Dockerfiles and build them
- ✅ Analyze your dependency files (requirements.txt, package.json, etc.)
- ✅ Generate CycloneDX SBOMs for each component
- ✅ Merge all SBOMs into a single file
- ✅ Enrich with vulnerabilities and fixed versions
- ✅ Produce a detailed metadata file