Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 25 additions & 0 deletions llms.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
# Yardstick

Yardstick is a Python CLI tool for parsing and comparing vulnerability scanner results. It helps security teams and developers analyze and improve vulnerability detection tools by managing scan results and labels for true/false positives.

## Key Features
- Captures and stores vulnerability scan results from tools like Grype and Syft
- Manages true positive/false positive labels for vulnerability matches
- Compares scanner performance and accuracy
- Supports result sets for batch operations across multiple images and scanner versions
- Interactive exploration of scan results and labels

## Main Components
- Result management: capture, list, explore, import, and compare scan results
- Label management: add, remove, and analyze vulnerability match labels
- Configuration via .yardstick.yaml for defining result sets and tool matrices
- CLI interface with subcommands for result and label operations

## Repository
https://github.com/anchore/yardstick

## Tech Stack
- Python 3.11+ with Click for CLI
- PyYAML for configuration
- Various data processing libraries (dataclasses-json, tabulate, etc.)
- Git integration for version tracking
Loading