Dev Container Features

This repository contains the following dev container features:

• sbom: this installs Microsoft's sbom-tool used to aid in generating SPDX 2.2 SBOMs (Software Bill of Material)
• trivy: this installs Trivy to scan for vulnerabilities in container images, file systems, and Git repositories

Example Usage

"features": {
    "ghcr.io/JasonTheDeveloper/features/sbom:1": {},
    "ghcr.io/JasonTheDeveloper/features/trivy:1": {}
}