# AGENTS.md

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

## Setup

```
go mod download
```

## Commands

```
go test ./...   # run the test suite
```

## Layout

- `pkg/`         1585 source files
- `internal/`    18 source files
- `integration/` 14 source files
- `magefiles/`   10 source files
- `misc/`        3 source files
- `ci/`          2 source files

## Conventions

- Tests live alongside the code they cover, following `.github/actions/trivy-triage/helpers.test.js`.
- CI defines what passing means. See `.github/workflows/auto-close-issue.yaml`, and keep it green.
- TODO: add the two or three conventions a newcomer always gets wrong here.

---

Drafted by agentreadme.com from what is in this repository. Everything marked TODO
needs a human. Check it in as AGENTS.md at the root.