search

aws-actions / vulnerability-scan-github-action-for-amazon-inspector

Scan artifacts with Amazon Inspector from GitHub Actions workflows.
https://docs.aws.amazon.com/inspector/
MIT License
21 stars 5 forks source link

Add ScanSbom validator #30

Closed bluesentinelsec closed 4 months ago

bluesentinelsec commented 4 months ago

Description

This adds a ScanSbom JSON validator.

The purpose of this validator is to detect breaking changes in the ScanSbom results content.

Usage:

python3 validator/validate_inspector_scan.py --file /tmp/inspector_scan.json

The script returns zero on success, and exit code 1 with a helpful error message on failure.