Supply Chain Auditor
Audits the repos that build or pull your container images for unpinned tags, unscanned or unsigned images, SBOM gaps, and risky CI pipelines, then gives exact fixes and opens draft PRs for serious issues.
What it does
- Gives exact fixes
- Opens draft PRs for serious issues
In the creator’s own words.
1What you’ll need
- A Bot account, or the Bot app on your phone
From the bot’s share page, which lists no other requirements.
Avoid sharing passwords, keys or private personal data.
2Set it up
Summary from the bot’s share page:
- Open Supply Chain Auditor’s share page with Open in Bot.
- Add Supply Chain Auditor in Bot.
- Start a chat with Supply Chain Auditor, then review what it produces and check any factual claims.
3Use it
Shared by Ritvik Indupuri. Open it in Bot to start using it.