diffused-lib 0.1.0

A vulnerability scan diffing library for container images and SBOMs

Diffused Library

The core Python library providing vulnerability scanning and diffing functionality for container images and SBOMs (Software Bill of Materials). This library enables programmatic access to vulnerability analysis capabilities.

Features

• 🔍 Vulnerability Scanning: Automated scanning of SBOMs using Trivy or scanning of container images using RHACS
• 📊 SBOM Diffing: Direct comparison of SPDX-JSON formatted SBOMs (Trivy only)
• 📄 Flexible Output: Programmatic access to vulnerability data
• 🐍 Python API: Clean, intuitive Python interface

Installation

Prerequisites

1. Install the scanner:
   1. Trivy: Follow the official Trivy installation guide
   2. RHACS: Follow the official roxctl installation guide
2. Python Environment: Ensure Python 3.12+ is installed

From Source

cd diffused
pip install -e .

From PyPI

pip install diffused-lib

Usage

Basic Library Usage

from diffused.differ import VulnerabilityDiffer

# Create a differ instance
vuln_differ = VulnerabilityDiffer(previous_image="ubuntu:20.04", next_image="ubuntu:22.04")

# Retrieve the vulnerabilities diff
vuln_differ.vulnerabilities_diff