In-repo vulnerability and license scans, scan policies, and SBOM export. Deeper inspection is AngusSecurity.