This folder contains all the tools and actions for dealing with building packages.
Wrangle will have customized build methods for each supported artifact type/destination.
For now Wrangle only supports building containers.
Wrangle supports building containers with GitHub actions in two ways:
- A reusable workflow that handles everything, SBOM generation, vuln scanning, and provenance generation. Example
- An action that you can plug into your existing workflow. Handles SBOM generation and vuln scanning.
Example vulnerability scan results:
