From c15da301384b0d925ec24d0532a41f73fad45c87 Mon Sep 17 00:00:00 2001 From: Tung Bui Date: Sat, 25 Jul 2026 20:02:10 +0700 Subject: [PATCH] docs: highlight security scanning in README key features Key Features didn't call out the Trivy vulnerability gate or SBOM generation, even though the dedicated Security section already documents them in detail. Add a summary bullet linking down to it. Claude-Session: https://claude.ai/code/session_01KwmxctVC43yU6xEr1cEdMu --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 43a4ce2..ef6068d 100644 --- a/README.md +++ b/README.md @@ -21,6 +21,7 @@ - **Comprehensive Toolset**: Pre-installed with tools like Git, Python, Ansible, Terraform, kubectl, Helm, GitHub CLI, AWS CLI, Azure CLI, Google Cloud CLI, and more. - **Easy Integration**: Use it directly or customize it with your preferred versions. - **Efficient Updates**: Tool versions are checked automatically and verified against the real installed binaries before every release, so published images track current, patched versions rather than drifting silently. +- **Security-First**: Every image is scanned for `CRITICAL`/`HIGH` vulnerabilities before merge and before publish, builds with fixable findings are blocked, and a CycloneDX SBOM is generated for every build — see [Security 🔒](#security-) below. - **Configuration Reusability**: Mounts host config folders for seamless reuse across sessions. ## Getting Started