Skip to content

Commit 952a4d6

Browse files
Update README.md
Signed-off-by: Chandu Paladugu <[email protected]>
1 parent b32ee2e commit 952a4d6

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

README.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,8 @@ CLI/CI Tool for Automating Vulnerability Management for Enhancing Software Suppl
2929
- SBOM
3030
- Report using Profiling tools Data
3131
- Report using Falco security tool using its run-time dependency packages tracking policy feature
32-
- Unnecessary packages used in container image by observing the run-time usage
32+
- Unnecessary packages used in container image by observing the run-time usage
33+
- Software Composition Analysis (SCA) report
3334
- Automation:
3435
- Report unused packages with full details
3536
- Remove unused dependencies from the codebase
@@ -42,7 +43,8 @@ CLI/CI Tool for Automating Vulnerability Management for Enhancing Software Suppl
4243
- Set SCSCTL as CI pipeline job
4344
- Send notifications on packages update and new container image build
4445
- Submit new PR/MR along with signed git commit when packages update in codebase is done
45-
- Build the new container image by using cosign keyless mode (preferred method to use) or key mode
46+
- Build the new container image by using cosign keyless mode (preferred method to use) or key mode
47+
4648

4749
> Future goals:
4850
> - Visualize code call flow like call graph, context, AST, CFG, PDG, etc., as graph diagrams using code property graph concept and neo4j graph database. Also, show dependencies graph flow from static and run-time data collected by profiling tools & falco, along with vulnerabilities, plus historical data by mapping historical changes in the code flow & packages. Something like Graph Buddy and Context Buddy as IDE plug-ins.

0 commit comments

Comments
 (0)