01Generate comprehensive SBOMs (SPDX/CycloneDX) from local workspaces or Git repositories
02Ensures absolute data privacy by not storing user code, SBOMs, or project data
03Integrates with GitHub Copilot for natural language prompt-driven security tasks
04Analyze open-source licenses for compliance and risk assessment
050 GitHub stars
06Scan projects for security vulnerabilities, providing CVE details and remediation guidance