Docs
Install Fendkit and prepare evidence for your software release.
Start
-
Install Fendkit
Install the release binary on Linux, macOS or Windows and run Fendkit on your own product.
-
The CRA for plugin makers
Understand which CRA duties may apply to your role and product.
Using Fendkit
-
Read the status items
See what each evidence state and exit code means.
-
Know what you ship
Find out which components Fendkit can detect in your source and release.
-
Review vulnerability findings
Review findings and see what data a scan sends.
-
Complete and review the drafts
Complete the draft documents and record your review.
-
Record an incident and its deadlines
Record an incident and track its reporting deadlines. Prepare reports for submission to ENISA.
-
Check a product release in GitHub Actions
Scan and check each product release in a GitHub Actions job on an Ubuntu runner.
-
Keep decisions in cra.yml
Save your product facts and decisions for later scans.
Reference
-
Command reference
Every command and flag, generated from the same command tree as fendkit --help.