From b4057e39bba72926aefbeff1010c824d0653b336 Mon Sep 17 00:00:00 2001
From: sander <sanderbevers@outlook.com>
Date: Thu, 5 Nov 2026 22:31:22 +0100
Subject: [PATCH] testing

---
 Jenkinsfile | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/Jenkinsfile b/Jenkinsfile
index 4e0e1f3..b0326d4 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -73,6 +73,27 @@ pipeline {
                 '''
             }
         }
+
+        stage('Security scan') {
+            agent {
+                docker {
+                    image 'fast_reader-ci:latest'
+                    reuseNode true
+                }
+            }
+            steps {
+                sh '''
+                    echo "=== Generate SBOM ==="
+                    syft dir:. -o cyclonedx-json=flashread-sbom.json
+
+                    echo "=== Scan SBOM for vulnerabilities ==="
+                    grype sbom:flashread-sbom.json -o table
+                '''
+
+                archiveArtifacts artifacts: 'flashread-sbom.json',
+                                 fingerprint: true
+            }
+        }
     }
 
     post {