defguard
defguard copied to clipboard
Generate SBOM using trivy and store as artifact
- [x] Generate Software Bill of Materials (SBOM) for all artefacts using Trivy https://trivy.dev/v0.33/docs/sbom/.
- [x] Store SBOMs as artefacts in GitHub.
- [x] ~~Generate an HTML report based on the SBOMs, store it as an artefact.~~
- [x] Add trivy vulnerability code scans to all CI pipelines (we currently only scan docker images)
- [x] Modify mobile CI to create releases on tag push and attach sbom file to the release
- [x] Run the trivy scanning periodically for the latest 3 versions.
- [ ] Notify devs if new vulnerabilities occur. Patches need to be created ASAP.
- [ ] The reports will be linked with a timestamp on the security page.