ca9/mkdocs.yml at main · duriantaco/ca9 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
site_name: ca9
site_description: Open source Python package security and evidence-backed SCA triage. Analyze reachable CVEs, package inventory, supply-chain risk, malicious package behavior, and dependency policy in local CI.
site_url: https://duriantaco.github.io/ca9/
site_author: duriantaco
repo_url: https://github.com/duriantaco/ca9
repo_name: duriantaco/ca9

theme:
  name: material
  logo: assets/ca9.png
  favicon: assets/ca9.png
  palette:
    - media: "(prefers-color-scheme: light)"
      scheme: default
      primary: deep purple
      accent: amber
      toggle:
        icon: material/brightness-7
        name: Switch to dark mode
    - media: "(prefers-color-scheme: dark)"
      scheme: slate
      primary: deep purple
      accent: amber
      toggle:
        icon: material/brightness-4
        name: Switch to light mode
  features:
    - navigation.sections
    - navigation.expand
    - navigation.top
    - content.code.copy
    - content.code.annotate
    - search.suggest
    - search.highlight
    - toc.follow

markdown_extensions:
  - admonition
  - pymdownx.details
  - pymdownx.superfences:
      custom_fences:
        - name: mermaid
          class: mermaid
          format: !!python/name:pymdownx.superfences.fence_code_format
  - pymdownx.highlight:
      anchor_linenums: true
  - pymdownx.inlinehilite
  - pymdownx.tabbed:
      alternate_style: true
  - pymdownx.snippets
  - attr_list
  - md_in_html
  - tables
  - toc:
      permalink: true

plugins:
  - search

extra_javascript:
  - assets/structured-data.js

nav:
  - Home: index.md
  - Getting Started:
      - Installation: getting-started/installation.md
      - Quick Start: getting-started/quickstart.md
  - User Guide:
      - CLI Reference: guide/cli.md
      - Supply-Chain Vetting: guide/supply-chain.md
      - Dependency Update Review: guide/dependency-review.md
      - Supported Formats: guide/formats.md
      - Dynamic Analysis: guide/coverage.md
      - Proof Standards: guide/proof-standards.md
      - Positioning: guide/positioning.md
  - Integrations:
      - GitHub Action: integrations/github-action.md
      - OSV Scan: integrations/osv.md
      - Snyk: integrations/snyk.md
      - Dependabot: integrations/dependabot.md
      - Trivy: integrations/trivy.md
      - Grype: integrations/grype.md
      - OSV-Scanner: integrations/osv-scanner.md
      - pip-audit: integrations/pip-audit.md
      - SARIF: integrations/sarif.md
      - OpenVEX: integrations/openvex.md
      - SBOM: integrations/sbom.md
      - MCP Server: integrations/mcp.md
      - CI/CD: integrations/ci-cd.md
  - Architecture:
      - Overview: architecture/overview.md
      - Evidence Layer: architecture/evidence.md
      - Verdict Engine: architecture/engine.md
      - Analysis Pipeline: architecture/analysis.md
      - Parsers: architecture/parsers.md
      - Secure Install Control Plane: proposals/secure-install-control-plane.md
  - API Reference:
      - Models: api/models.md
      - Engine: api/engine.md
      - Scanner: api/scanner.md
      - Analysis: api/analysis.md
      - Parsers: api/parsers.md
      - Report: api/report.md
  - Benchmarks: benchmarks.md
  - Demo: demo.md
  - Release Checklist: release-checklist.md

extra:
  social:
    - icon: fontawesome/brands/github
      link: https://github.com/duriantaco/ca9