diff --git a/README.md b/README.md index 07286d2..83acbea 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -# CVE Differential (`cve-differential`) +# CVE Differential A self-contained Gitea and GitHub Actions composite action that extracts multi-platform SBOM attestations from container images, runs vulnerability scans with [Trivy](https://github.com/aquasecurity/trivy), and produces a set-based CVE delta report between a head image and a target baseline image. @@ -46,16 +46,13 @@ jobs: build-and-scan: runs-on: ubuntu-latest steps: - - name: Checkout repository - uses: actions/checkout@v4 - + - name: Build and Push Head Container Image uses: docker/build-push-action@v5 with: context: . push: true sbom: true - platforms: linux/amd64,linux/arm64 tags: registry.example.com/my-app:git-${{ github.sha }} - name: Compare Vulnerabilities (Head vs Target)