Philipp/cve-differential
Public Access
1
0 Fork 0
generated from Philipp/template-git
Code Issues 1 Pull Requests 1 Actions Packages Releases 1 Activity

Update README.md #3

Merged
Philipp merged 2 commits from philipp-patch-1 into main 2026-09-13 00:36:23 +02:00
Conversation 0 Commits 2 Files Changed 1
+2 -3
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2 -3
View File
@@ -6,10 +6,9 @@ A self-contained Gitea and GitHub Actions composite action that extracts multi-p
## ✨ Features
- **Multi-Platform Support**: Automatically detects and extracts SPDX SBOM attestations for `linux/amd64` and `linux/arm64`.
- **Multi-Platform Support**: Automatically detects and extracts SPDX SBOM attestations for multi arch images.
- **Fast Attestation Extraction**: Uses `docker buildx imagetools inspect` to extract SBOMs directly from registry manifest indices in seconds without downloading layer blobs.
- **Graceful Fallbacks**: If SBOM attestations or baseline images are missing, automatically falls back to generating SBOMs directly with Trivy.
- **Zero-Dependency Diff Engine**: Built with native Node.js (`node:fs`, `node:path`) — no Python or external packages required on runner environments.
- **Graceful Fallbacks**: If SBOM attestations or baseline images are missing, automatically falls back to generating SBOMs directly with Trivy. Using images that do contain an SBOM is highly recomended though!
- **Set-Based Differential Analysis**: Categorizes vulnerabilities into:
- 🔴 **Introduced Vulnerabilities** (newly added in this branch / commit)
- 🟢 **Fixed Vulnerabilities** (present in target baseline, resolved in this branch)