security review on pull requests (Inspector)

Kusari is a software supply chain security platform that builds a continuously updated knowledge graph of components across repos, images and pipelines, verified at source rather than inferred from finished binaries. It answers whether a vulnerability exists, where it is running, how bad it is once reachability, exploitability and blast radius are accounted for, and how to fix it. Kusari was founded by Tim Miller, Parth Patel, Michael Lieberman and Brian Miller, who co-created GUAC and SLSA and maintain in-toto attestations.

Read more

attestation generationautonomous remediation (AutoFix)blast radius tracingexploitability rankingingests scanner and SBOM tool outputreachability analysisSBOM generationsoftware supply chain security