chore(deps): drop Java + npm Dependabot sections; add gomod (#154) #186
security.yml
on: push
OSV-Scanner (SCA)
7s
Trivy (filesystem + container scan)
8s
Semgrep (SAST)
21s
Gitleaks (secret scan)
13s
jscpd (duplication < 3% on touched code)
14s
SBOM (SPDX + CycloneDX)
15s
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
sbom
|
13.1 KB |
sha256:c93c138636b15dacdc552811429ea3e6f3e5f7b335927f6e9bd7840249b91a6e
|
|