File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -150,6 +150,7 @@ npx markdownlint-cli2 "**/*.md"
150150npx markdownlint-cli2 --fix "** /* .md"
151151
152152Dockerized security scans (recommended for local, cross-platform)
153+
153154- Grype:
154155 docker run --rm -v "$PWD:/workspace" anchore/grype: latest grype dir:/workspace -o sarif=grype.sarif
155156- Gitleaks:
@@ -164,6 +165,7 @@ Dockerized security scans (recommended for local, cross-platform)
164165 docker run --rm -v "$PWD:/data" mkodockx/docker-clamav clamscan -r /data --log=/data/clamdscan.txt
165166
166167Notes:
168+
167169- These commands write SARIF/text artifacts to the project root so CI/agents can consume them.
168170- CI already runs scanners; use these for local verification when Docker is available.
169171- If Docker is unavailable, use the platform-specific installs documented in docs/DEVELOPERS_GUIDE.md.
You can’t perform that action at this time.
0 commit comments