Metadata-Version: 2.5
Name: cernus-plugins
Version: 0.1.0
Summary: First-party Cernus connectors, scanners, and exporters: Genesis, Trivy, Syft/CycloneDX, SARIF, OSCAL.
Project-URL: Homepage, https://github.com/Inceptium-ai/cernus-framework
Project-URL: Repository, https://github.com/Inceptium-ai/cernus-framework
Author-email: Inceptium <opensource@inceptium.ai>
License-Expression: Apache-2.0
License-File: LICENSE
Classifier: Development Status :: 3 - Alpha
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Security
Requires-Python: >=3.12
Requires-Dist: cernus-core>=0.1.0
Requires-Dist: pyyaml>=6.0
Description-Content-Type: text/markdown

# cernus-plugins

First-party plugins for [Cernus](https://github.com/Inceptium-ai/cernus-framework).
Each one wraps a tool you already run; none re-implements a scanner.

| Plugin | Kind | What it does |
|---|---|---|
| `genesis` | connector | Genesis `EvidencePackage` + `DeliveryManifest` → System, Deployment, Findings |
| `trivy` | connector + scanner | `trivy image/sbom --format json` → Findings with CVE/CVSS/purl; runs trivy |
| `syft` | scanner | `syft <image> -o cyclonedx-json` → SBOM |
| `cyclonedx` | connector | CycloneDX SBOM → Sbom + component Assets |
| `sarif` | connector + exporter | SARIF 2.1.0 in (semgrep, CodeQL, …) and out |
| `oscal` | exporter | Findings → OSCAL 1.1 POA&M (minimal, schema-shaped) |

Plugins register through entry points (`cernus.connectors`, `cernus.scanners`,
`cernus.exporters`). Write your own the same way — see `cernus_core.plugins`.
