Dependency & image scanning

A step of the Cloud application tree on Gradus, in the Security area: Secrets, auth, TLS, input.

Scan dependencies and container images for known vulnerabilities in CI and keep a software bill of materials.

Usually comes after: Input validation.

Prompt for your AI assistant

Add dependency vulnerability scanning and container image scanning to the CI workflow, generate an SBOM on each build and fail the build on critical findings.

• Show on map
• This step as Markdown
• Every step of the tree, for AI assistants

This is https://gradus.kazet.blog/tree/cloud-application/step/vulnerability-scanning as plain HTML. In a browser the page also lets you mark the step forged and copy a message for your AI assistant.