Skip to content

Commit

Permalink
minor spelling
Browse files Browse the repository at this point in the history
Signed-off-by: Ian Dunbar-Hall <[email protected]>
  • Loading branch information
idunbarh committed Sep 30, 2024
1 parent d03df22 commit 4bc2c15
Showing 1 changed file with 2 additions and 3 deletions.
5 changes: 2 additions & 3 deletions phase_1/keycloak/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,12 +12,11 @@ This workflow illustrates creation of SPDX and CycloneDX SBOMs for a java applic

![SBOM Lifecycle](../../assets/lifecycle.svg)


- `Generate SBOM with Trivy` Job
- __Tool__
- [trivy](https:/aquasecurity/trivy)
- __Notes__
- Analyize the keycload source code using [trivy](https:/aquasecurity/trivy). There are several great open source sbom generation tools, and this could easily be repleased with a tool of your choice.
- Analyze the keycloak source code using [trivy](https:/aquasecurity/trivy). There are several great open source sbom generation tools, and this could easily be repleased with a tool of your choice.
- `Augment Keycloak SPDX` and `Augment Keycloak CycloneDX` Jobs
- __Tool__
- [sbomasm](https:/interlynk-io/sbomasm)
Expand All @@ -30,5 +29,5 @@ This workflow illustrates creation of SPDX and CycloneDX SBOMs for a java applic
- __Notes__
- SBOM generation tools usually find components and their dependencies by analyzing package manager configuration files. This _usually_ does not provide enough information to meet NTIA minimum elements, and tools like [parlay](https:/snyk/parlay) can enrich components in an SBOM by looking up additional component metadata from external databases.
- `Display SBOM quality score through sbomqs` Job
- __Tools__
- __Tool__
- [sbomqs](https:/interlynk-io/sbomqs)

0 comments on commit 4bc2c15

Please sign in to comment.