Below you will find pages that utilize the taxonomy term “RomainValmo”
January 2, 2026
Full Trivy Scan with CycloneDX SBOM
Version updated for https://github.com/RomainValmo/FullTrivyScanCycloneDX to version v1.0.6.
This action is used across all versions by ? repositories. Go to the GitHub Marketplace to find the latest changes.
Action Summary This GitHub Action provides an automated security analysis for projects by scanning Dockerfiles and dependency files, generating accurate CycloneDX SBOMs (Software Bill of Materials), and enriching them with vulnerability details and metadata. It simplifies the process of identifying vulnerabilities, categorizing components, and producing standardized reports, making it easier to manage security risks and ensure compliance with CycloneDX 1.