supply-chain-security
ZHzhaoxuya520993 installs
Find security risks in your software supply chain.
What it does
Assesses software supply chains to identify risks in dependencies, build pipelines, container images, and artifact integrity.
When to use it
Use for supply-chain assessments, dependency vulnerability checks, CI/CD audits, container analysis, component compliance reviews, and build provenance verification.
How to use it
Give it a project to assess; it returns security findings backed by reproducible evidence.
What you provide
- An existing project
Uses
OS
NV
ED
Good to know
- acts without asking
Latest review
What you need · 6
Uses Trivy to scan container images for high and critical vulnerabilities.
Uses hadolint to audit the Dockerfile.
Access · 5
This skill
OSV.dev
Read
Looks up vulnerabilities in OSV
NVD
Read
Looks up vulnerabilities in NVD