feat: SBOM and Vulnerability Scanning Integration with Compage #141
Description
Integrate Trivy, Syft, Grype, and CycloneDX into Compage for simplified Software Bill of Materials (SBOM) generation and vulnerability scanning. Automate the identification of vulnerabilities within dependencies, ensuring code security and compliance.
Benefits:
- SBOM Generation: Automatically generate comprehensive SBOMs for improved visibility into project dependencies.
- Vulnerability Scanning: Scan dependencies for vulnerabilities using Trivy, Syft, and Grype to ensure code security.
- Compliance and Risk Mitigation: Identify and address vulnerabilities early on, reducing security risks and ensuring compliance.
By integrating these tools, Compage users can easily generate SBOMs and proactively address vulnerabilities, enhancing code security and project stability.