# Dependency & image scanning

A step of the [Cloud application](https://gradus.kazet.blog/tree/cloud-application) tree on Gradus, in the Security area: Secrets, auth, TLS, input.

Page: https://gradus.kazet.blog/tree/cloud-application/step/vulnerability-scanning

Scan dependencies and container images for known vulnerabilities in CI and keep a software bill of materials.

Usually comes after: [Input validation](https://gradus.kazet.blog/tree/cloud-application/step/input-validation).

## Prompt for your AI assistant

```
Add dependency vulnerability scanning and container image scanning to the CI workflow, generate an SBOM on each build and fail the build on critical findings.
```

Every step of the tree: https://gradus.kazet.blog/tree/cloud-application/llms.txt