gouvernante¶
A static Go binary for detecting npm supply chain compromises. Scans lockfiles against configurable JSON rules and checks host filesystems for known IOCs.
Where do you want to go?¶
I'm new and want to understand what this does
Core concepts, how the scanner works, and your first scan in 2 minutes.
I need to write a rule for a new incident
A new supply chain attack just dropped. Follow the step-by-step guide.
I want to integrate this into CI/CD
Automated supply chain scanning on every build.
A new attack just hit and I need to respond now
Step-by-step: gather IOCs, write rule, distribute, scan everything.