Overview

Sttor Containers secures container images in CI by scanning for vulnerabilities and secrets, producing an image SBOM, and enforcing blocking policies so risky images don’t get deployed. It’s designed to run natively inside GitHub Actions, with the option to push scan results to the DevSecOps Bot dashboard for centralized visibility and audit trails. GitHub