Update README.md

README.md

@@ -90,6 +90,8 @@ The project uses [Task](https://taskfile.dev/) for all development tasks.
 | podman-build  | Build Podman image                    |
 | podman-run    | Run Podman container                  |
 | podman        | Build and run Podman container        |
+| scan          | Scan container image with trivy       |
+| sbom          | Generate SBOM with trivy              |
 | version:minor | Bump version minor                    |
 | version:major | Bump version major                    |
 | setup         | Setup development environment         |

Taskfile.yml

@@ -25,7 +25,7 @@ tasks:
   publish:
     desc: Publish to npm registry
     cmds:
-      - pnpm publish
+      - pnpm publish --no-git-checks
 
   preview:
     desc: Preview production build
@@ -80,6 +80,18 @@ tasks:
     desc: Build and run Podman container
     deps: [podman-build, podman-run]
 
+  scan:
+    desc: Scan container image with trivy
+    cmds:
+      - trivy image --scanners vuln surveilled
+
+  sbom:
+    desc: Generate SBOM with trivy
+    cmds:
+      - mkdir -p sbom
+      - trivy fs --format spdx-json --include-dev-deps --output sbom/sbom.spdx.json .
+      - trivy fs --format cyclonedx --include-dev-deps --output sbom/sbom.cyclonedx.json .
+
   setup:
     desc: Setup development environment
     cmds: