The GitHub app for pull-request vulnerability analysis as well as SBOM creation and upload to Dependency-Track.

🚢 - VERSION without the leading v, and there's a fat-VERSION tagged image containing even more SDKs (like Swift)

It wraps around

• which covers many programming languages and build systems for SBOM creation
• for rating the quality of a sbom
• for creation of vulnerability reports in pull-requests
• or optional as alternative to depscan

It's built using with GitHub integration handled by .

• Using Technolinator
  • Repository specific configuration
• Operating Technolinator
  • Runtime configuration
  • Deployment configuration
  • Adopting to your needs
• Maintaining Technolinator
  • Project structure
  • Contribution

This repository is published under the Apache License 2.0

get to know us 👉 https://mms.tech 👈