This repository contains the following dev container features:
- sbom: this installs Microsoft's sbom-tool used to aid in generating SPDX 2.2 SBOMs (Software Bill of Material)
- trivy: this installs Trivy to scan for vulnerabilities in container images, file systems, and Git repositories
"features": {
"ghcr.io/JasonTheDeveloper/features/sbom:1": {},
"ghcr.io/JasonTheDeveloper/features/trivy:1": {}
}