<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Container Supply Chain Security — API Reference

## trivy CLI

```bash
trivy image --severity CRITICAL,HIGH IMAGE
trivy image --format json --quiet IMAGE
trivy image --list-all-pkgs IMAGE
trivy fs --scanners vuln,secret,misconfig ./
```

## grype CLI

```bash
grype IMAGE --only-fixed --fail-on high
grype IMAGE -o json
grype sbom:./sbom.json
```

## syft CLI

```bash
syft IMAGE -o spdx-json
syft IMAGE -o cyclonedx-json
syft dir:./app -o spdx-json
```

## SLSA Verifier

```bash
slsa-verifier verify-image --source-uri REPO --builder-id BUILDER IMAGE
slsa-verifier verify-artifact --source-uri REPO --provenance-path PROV FILE
```
