On 05/02/2016 01:09 PM, Scott Collier wrote:
On 05/02/2016 12:06 PM, Josh Berkus wrote:
On 05/02/2016 10:03 AM, Scott Collier wrote:
On 05/02/2016 11:59 AM, Josh Berkus wrote:
On 05/02/2016 06:10 AM, Daniel J Walsh wrote:
http://developers.redhat.com/blog/2016/05/02/introducing-atomic-scan-container-vulnerability-detection/
Where's the upstream project for this?
https://github.com/projectatomic/atomic
Ah, it's part of Atomic CLI? Wasn't quite clear on that ...
yes. in particular, here's the plugin:
https://github.com/projectatomic/atomic/blob/master/Atomic/scan.py
Brent is doing most of the work on this, and he is planning a second
blog on how to write your own scanners.
He has examples that just list rpm content and another one which will
run a sosreport on each container image.
We hope to eventually work with other third party scanners.