Trustify UI Component

Build and Test Status

branch	last merge CI	last merge image build	nightly CI
main

branch	last merge e2e CI	nightly e2e CI
main

Usage

Trustify UI provides a web interface for software supply chain security:

• Advisories — Browse, search, and filter security advisories (CVE, RHSA, GHSA) with severity and status tracking
• Vulnerabilities — View vulnerability details, related advisories, and affected products
• SBOMs — Upload and inspect Software Bills of Materials; explore package dependencies
• Packages — Search packages across ecosystems and view associated SBOMs and vulnerabilities
• Products — Manage product definitions and track their security posture
• Importers — Configure and monitor data import jobs from external vulnerability and SBOM sources

Access the application at http://localhost:3000 (development) or your deployed URL. Authentication is optional and controlled by the AUTH_REQUIRED environment variable.

Development

Requisites

NodeJS >= 22. Use nvm to install NodeJS

nvm install 22
nvm use 22

• Backend. Clone trustify and there execute:

cargo run --bin trustd

It will start the backend in http://localhost:8080

Install dependencies

npm ci

Init the dev server

npm run start:dev

Open browser at http://localhost:3000

Environment variables

ENV VAR	Description	Default value
TRUSTIFY_API_URL	Set Trustification API URL	http://localhost:8080
AUTH_REQUIRED	Enable/Disable authentication	true
OIDC_CLIENT_ID	Set Oidc Client	frontend
OIDC_SERVER_URL	Set Oidc Server URL	http://localhost:8090/realms/trustify
OIDC_SCOPE	Set Oidc Scope	openid

Crate

Contributing

We welcome contributions! Please read our Contributing Guidelines before submitting changes.