Results for “grype”

Generate CycloneDX and SPDX SBOMs from container images and filesystems, scan them for vulnerabilities with Grype, and sign attestations with Cosign for supply-chain trust.

Inspects gRPC services via reflection, health checks, channelz, and grpcurl to discover methods, monitor health, and analyze load balancing.

Operate GoHome services via gRPC discovery, metrics validation, and read-only RPC calls, with stateful actions gated on user approval.

Interrogates a plan against real third-party documentation, extracting hard constraints and asking doc-cited questions before producing a constraints appendix.

Scan container images for vulnerabilities with Trivy and Grype, generate SBOMs, sign images with Cosign and Sigstore, configure registry access controls, and enforce security gates in CI/CD pipelines.