boostsecurityio / boostsecurityio/lotp
[LOTP] Add grype / syft
Open
idea
Research
- Dominant language
- HTML
- Stars
- 164
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
# Description of the LOTP tool
Grype is an SCA tool that can be configured we a config file.
# Configuration files
https://github.com/anchore/grype#configuration
looks like it might but be possible to achieve some RCE by overriding a Docker image it uses ? TBD?
This is still very speculative.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.