Security Scanning — Vulnerability & SBOM (Universal) + NIST RMF Gate (US_FED only) #277

Job	Run time
Secret Scanning (Gitleaks)	6s
Python Dependency Vulnerability Scan (Universal — NIST RA-5/SI-2 reporting: US_FED only)	1m 50s
Container Image Vulnerability Scan — Trivy (Universal — NIST RA-5/CM-8 reporting: US_FED only...	1m 32s
Container Image Vulnerability Scan — Trivy (Universal — NIST RA-5/CM-8 reporting: US_FED only...	1m 32s
OPA Rego Policy Lint and Test (Universal — NIST CM-6/SI-7 reporting: US_FED only)	9s
Container Image Vulnerability Scan — Trivy (Universal — NIST RA-5/CM-8 reporting: US_FED only...	1m 47s
Dependency Lockfile Validation (Universal — NIST SI-2/CM-8 reporting: US_FED only)	32s
Generate and Validate SBOM (Universal — NIST CM-8/POAM-006 reporting: US_FED only)	1m 14s
NIST SP 800-53 Compliance Gate (US_FED only)	0s
	8m 42s

Navigation Menu