Publish curated CertScope source from 2ecbac0dd74ebab613af57640f2d1ac5245ced6d
This commit is contained in:
1 parent
e5ae3cbf11
commit
c09c753855
3 files changed
+13
-4
No files matched your search
@@ -63,6 +63,15 @@ npm run sbom
|
||||
|
||||
`npm run sbom` writes an ignored production CycloneDX file named `certscope-sbom.cdx.json`.
|
||||
|
||||
## Your first inspection
|
||||
|
||||
1. Enter one public hostname, without a URL scheme, path or IP literal.
|
||||
2. Read the collection status for DNS, TLS and HTTP before interpreting the score.
|
||||
3. Open a finding to inspect the observed evidence and recommended change.
|
||||
4. Export the report when you need a reproducible handoff; rerun the inspection after changing the target.
|
||||
|
||||
A blocked target is a safety decision, and an unavailable collector is incomplete evidence. Neither should be interpreted as a successful check. The screenshots above are offline fixtures; they do not imply that the demonstration hostname is reachable.
|
||||
|
||||
## Docker deployment
|
||||
|
||||
```bash
|
||||
|
||||
Reference in new issue
Block a user