Prove where every package and CVE in a container image came from: the base image or the build step that added it. Zero dependencies, air-gap ready.
provenance vulnerability-management devsecops container-security sbom supply-chain-security iron-bank
-
Updated
Nov 12, 2026 - Python