Resources to help vulnerability scanners

build APKs from source code

Terraform provider to perform OCI image operations

#supply #chain #attack #detection

Build OCI images from APK packages directly without Dockerfile

Universal declarative depenency bump tool

A sweet little formatter for YAML

A collection of reusable Github Actions workflows.

Run malcontent security scanner on pull requests to detect malicious behavior changes between commits