nenadzaric/skills-intel-poutine-scan repository overview

⁠poutine-scan

Scan CI/CD pipeline definitions (GitHub Actions, GitLab CI, Azure Pipelines, Tekton) for build-pipeline supply-chain vulnerabilities with BoostSecurity poutine analyze_local. Native JSON findings and rule catalog; offline, nothing runs.

⁠Immutable image

docker pull --platform linux/amd64 docker.io/nenadzaric/skills-intel-poutine-scan@sha256:e773e26c875664ab0a2f3d104e88bbc1d241499ce6f789ecfc2b990e67beece8

Image index: sha256:ff38bdf7d98989f21cb7163a360e6771b299cd97ed06089c247ba2a35fd12e9e.

⁠Source and license notices

This accompanying OCI artifact contains the original build recipe and runtime sources, pinned source directions, and original installed license/notices. Registry relocation and source-link metadata corrections in the current Git recipe do not change the image executable bytes. It is not a full mirror of every upstream source archive.

oras pull docker.io/nenadzaric/skills-intel-poutine-scan@sha256:551374b4f8b3d8dc75abcf140dae025cb1afd0cad6355667eb3a7c5b5c432fea
sha256sum poutine-scan-source-notices.tar.gz

Expected bundle SHA256: 0b23771d3a09a9fa3d131ba647a8861842f7697dffc337e720f38323a8de3d1c. Extract to read build-source/ and notices/SOURCE-AND-NOTICES.json.

Native license: Apache-2.0.

Pinned source archive: https://codeload.github.com/boostsecurityio/poutine/tar.gz/8918c66db19ecfd12b2f8379e445c3da4589e599⁠