Run dpndncY in a fully air-gapped environment.
Zero outbound network calls. Advisory data loaded from offline bundles. The default deployment posture for regulated industries.
Executable docs ship with the install
The full reference for this topic — configuration files, code samples, CLI flags, API endpoints — ships inside every dpndncY installation so it always matches your installed version. This public-preview page lists what the in-product docs cover.
In the in-product docs
- Offline bundle format (OSV + NVD + GHSA + KEV + EPSS + ExploitDB)
- Bundle signing and integrity verification
- Cron-style bundle refresh from a side-channel host
- Cert chain bootstrap for internal CA
- Sigstore-keyless is unavailable air-gapped — use local keypair