On-Prem: Identify CVEs and SBOM in container images using security center
about 1 month ago by Krish Advani
You can now check for CVEs and export SBOMs for all on-prem container images provided by Quickwork before installation, directly from the self-managed installation portal. While you may continue to pull images to your own repository for scanning and signing, Quickwork regularly scans these images using Trivy and highlights identified vulnerabilities, their severity, and the versions in which fixes are available. SBOMs are generated in SPDX 2.3 format and can be exported for independent verification and further security analysis.