Skip to content

Commit

Permalink
Wording updates from PR review
Browse files Browse the repository at this point in the history
  • Loading branch information
riverma committed Jul 4, 2024
1 parent 6aa9388 commit 9004fa5
Showing 1 changed file with 4 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -84,9 +84,10 @@ The below steps, once enacted, will ensure that any local `git commit` actions t
4. Grype-based vulnerability scanning should run every time a `git commit` is invoked. The commit will be blocked if CRITICAL level vulnerabilities are found and will ask the developer to fix them prior to committing.

### Step 3: Set Up Automated Repository Scanning
- **GitHub**:
- We recommend installing the official Grype GitHub action to set up automated dependency vulnerability scanning. Available [at this link](https://github.com/marketplace/actions/anchore-container-scan).
- We also recommend setting up GitHub's official Dependabot action to also look for vulnerabilities. See our [GitHub Security Guide](/docs/guides/software-lifecycle/security/github-security) on this.

For GitHub users, we recommend:
- Installing the official Grype GitHub action to set up automated dependency vulnerability scanning. The tool is available [at this link](https://github.com/marketplace/actions/anchore-container-scan).
- Setting up GitHub's official Dependabot action to also look for vulnerabilities. See our [GitHub Security Guide](/docs/guides/software-lifecycle/security/github-security) on this.

---

Expand Down

0 comments on commit 9004fa5

Please sign in to comment.