DepAegis

質問と回答

• Easy Setup
  It takes only a minute to install and start using the tool with simple commands and a quick setup.
• Private Registry
  You can publish and store packages like npm, NuGet, Maven, PyPI, and Docker in your own private registry.
• CI/CD Integration
  Works smoothly with popular tools like GitHub Actions, GitLab CI, and Jenkins for automated workflows.
• Secure Publishing
  Every package you publish is signed, scanned for vulnerabilities, and has an SBOM to ensure security.
• Universal Registry
  Supports many package types and containers in one easy-to-use registry, including npm, NuGet, Maven, and Docker.
• Dependency Firewall
  Prevents vulnerable packages from entering your code with built-in policies and OPA Rego integration.
• Simple Configuration
  Point your package manager to your private registry easily with clear configuration steps.
• Supply Chain Security
  Includes features like SLSA Provenance, Sigstore signing, SBOMs, and compliance reports to protect your supply chain.
• CRA Compliance Reports
  Provides reports to meet EU Cyber Resilience Act rules, including SBOM attestations and audit trails.
• Vulnerability Scanning
  Checks for vulnerabilities in real-time using OSV.dev and NVD, along with secret, license, and typo checks.
• One-Command Installation
  You can install the CLI with a single command using Docker, Helm, or directly on your machine.
• Automatic Security Checks
  When you publish, the system automatically signs, scans, and creates security reports for your packages.
• Built-in Security Features
  Security is included from the start, with signing, scanning, and attestation on every package.