bomber
Scans SBoMs for security vulnerabilities
Details
Category: Scanners
Publisher: trickest-mhmdiaa
Created Date: 9/26/2022
Container: quay.io/trickest/bomber:v0.3.2
Source URL: https://github.com/devops-kung-fu/bomber
Parameters
Command:
--debug
- Displays debug level log messages.Command:
--token
- The API token for the provider being used.Command:
--output
- How bomber should output findings (json, xml, stdout) (default stdout)Command:
--provider
- The vulnerability provider (ossindex, osv). (default osv)Command:
--username
- The user name for the provider being used.Command:
- Single SBOM fileCommand:
- Scan a folder of SBOMs