= Container Image openSCAP Scanner (Non-OpenShift Hosted)
NOTE: This is a non-official be-spoke solution.
Pre-requisites:
This scanner use-case:
pyscanner.py
)
b. RPM based openSCAP (pyscanner_cli.py
)pyscanner.py(Containerized openSCAP) [source, bash]
pyscanner.py --image-url docker-registry-default.apps.example.com/parks-dev/mlbparks --image-tag 0.0.0 --image-mount /mnt/imagetest --scan-name myrhel7
usage: pyscanner.py [-h] --image-url IMAGE_URL --image-tag IMAGE_TAG --image-mount IMAGE_MOUNT --scan-name SCAN_NAME
A wrapper to mount overlay image layer and scan. Store result in directory for processing.
optional arguments: -h, --help show this help message and exit --image-url IMAGE_URL The location of the image in upstream repo --image-tag IMAGE_TAG The tag for the image --image-mount IMAGE_MOUNT The location of the overlay image mount point. --scan-name SCAN_NAME This scan runtime name.
pyscanner_cli.py(CLI openSCAP)
Example with webserver hosting the results. ( Setting up webserver is out from this README scope.)
image::images/example1.png[]