Giters

intelops / compage

Compage - Low-Code Framework to develop Rest API, gRPC, dRPC, GraphQL, WebAssembly, microservices, FaaS, Temporal workloads, IoT and edge services, K8s controllers, K8s CRDs, K8s custom APIs, K8s Operators, K8s hooks, etc. with minimal coding and by automatically applying best practice methods like software supply chain security measures, SBOM, openAPI, cloudevents, etc. Auto generate code after defining requirements in UI as diagram.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

feat: SBOM and Vulnerability Scanning Integration with Compage

azar-intelops opened this issue · comments

commented

Integrate Trivy, Syft, Grype, and CycloneDX into Compage for simplified Software Bill of Materials (SBOM) generation and vulnerability scanning. Automate the identification of vulnerabilities within dependencies, ensuring code security and compliance.

Benefits:

  • SBOM Generation: Automatically generate comprehensive SBOMs for improved visibility into project dependencies.
  • Vulnerability Scanning: Scan dependencies for vulnerabilities using Trivy, Syft, and Grype to ensure code security.
  • Compliance and Risk Mitigation: Identify and address vulnerabilities early on, reducing security risks and ensuring compliance.

By integrating these tools, Compage users can easily generate SBOMs and proactively address vulnerabilities, enhancing code security and project stability.