Secure releases for GitHub repositories
DigiCert® Software Trust Manager's secure release feature integrates with GitHub to monitor the repositories you grant access to, including their releases. It ingests and tracks security findings generated by CodeQL. These findings may include reported common vulnerabilities and exposures (CVEs) and common weakness enumerations (CWEs).
Software Trust Manager also accesses software bill of materials (SBOMs) generated during analysis to provide visibility into component dependencies and versions across your repositories and releases.
Findings are refreshed daily, continuously reevaluating both current and historical releases so you can determine whether newly disclosed vulnerabilities affect specific versions. Results are presented in a centralized dashboard with clear, version level visibility.
중요
Secure release features are available based on your subscription package. Access may vary depending on the capabilities included in your package. Secure release is currently available to new customers. Contact DigiCert Support to get started.
Existing customers who want to access Secure release can also contact DigiCert Support for assistance with subscription packages.