syoul 42b3d28505 feat: integrer SBOM dans la pipeline CI ...

- sbom-generate: Syft scanne l'image Docker buildee (radar-business)
- sbom-scan: Trivy CVE depuis le SBOM (cache /home/syoul/trivy-cache)
- sbom-publish: envoi vers Dependency-Track (dtrack.syoul.fr)
Nouveau secret requis: dependency_track_token

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-19 19:04:20 +01:00

6.5 KiB

Raw Blame History

View Raw