defguard icon indicating copy to clipboard operation
defguard copied to clipboard

Generate SBOM using trivy and store as artifact

Open kchudy opened this issue 4 months ago • 0 comments

  • [x] Generate Software Bill of Materials (SBOM) for all artefacts using Trivy https://trivy.dev/v0.33/docs/sbom/.
  • [x] Store SBOMs as artefacts in GitHub.
  • [x] ~~Generate an HTML report based on the SBOMs, store it as an artefact.~~
  • [x] Add trivy vulnerability code scans to all CI pipelines (we currently only scan docker images)
  • [x] Modify mobile CI to create releases on tag push and attach sbom file to the release
  • [x] Run the trivy scanning periodically for the latest 3 versions.
  • [ ] Notify devs if new vulnerabilities occur. Patches need to be created ASAP.
  • [ ] The reports will be linked with a timestamp on the security page.

kchudy avatar Aug 29 '25 09:08 kchudy