bomber
bomber copied to clipboard
devops-kung-fu
Scans Software Bill of Materials (SBOMs) for security vulnerabilities
* Adds json formatted output via the --output flag * Fixes ossindex to display cve info instead of cwe when available
The removeDuplicates function is handy and we can use it elsewhere in DKFM. Extract it from here, move it to DKFM Common (needs to be uppercased there), and wire bomber...
Similar to #8, but add an output flag to bomber to save detailed output to a JSON file. I'm interested in using this from CI/CD and would appreciate a JSON...
```bomber``` should work on Windows, but needs to be tested. In addition we should allow installation using Chocolaty
The documentation for contributing to the repository needs to be a little clearer. Also, the license for ```bomber``` isn't MIT and needs to be corrected.
Add an output flag to ```bomber``` to save detailed output to a PDF or HTML file.
closes #66 closes #68
The results struct should contain a map of filename and SHA256 hash of the files processed by ```bomber```. This section should be added to both the STDOUT and HTML output...
Some vulnerability providers use markdown in their descriptions. Bomber should render these so they output in a clean way in HTML output.
Metadata
Owner
Metadata
Scans Software Bill of Materials (SBOMs) for security vulnerabilities