Introducing FlakeAudit, a CLI for evaluating CycloneDX SBOMs against custom policies

4 Likes

This is so great!! Extremely useful tooling. I wonder if it would be possible for upstream nix to use meta.vulns on a scoped set of packages or something, I guess it would be hard to get buy-in on the maintenance cost