Tamp.Security.Pipeline
Tamp meta-package — one PackageReference, one base-class inheritance, get the whole Wave 1+2 security chain: CycloneDX SBOM → SAST (OpenGrep + Roslyn) → SCA (osv-scanner + Dependency-Track) → Trivy secrets+misconfig → DefectDojo reimport. Adopters override `SecurityProductName` + `SecuritySolutionPath` and run `tamp Security`. DT and DD legs are env-var-gated; producer half runs unconditionally. .NET-focused for v0 — non-.NET adopters override Sbom to use Tamp.Syft instead.
View on Github
Activity
- Latest release
- 3w ago
- Total releases
- 5
- Cadence
- ~3 days
- Last 12 months
- 5
Reach
- Stars
- 9
Details
- License
- MIT
- First release
- May 18, 2026
Releases