docker / scout-cli

Docker Scout CLI
https://docker.com/products/docker-scout
Other
255 stars 60 forks source link

Analyzing non-images #4

Closed tianon closed 9 months ago

tianon commented 1 year ago

Scout knows how to analyze things like Go binaries, Java's .jar files, node_modules, etc. However, it also (reasonably) assumes the input is a container image in one of a variety of formats, so you can't really analyze something like a Go binary directly without first packing it up in a tarball and adding a bunch of unnecessary JSON metadata so you can pretend it's an image. It would be really neat if we could pass in a file or a directory that isn't container related, and have it perform similar analysis as it would if the thing passed in existed inside a container image instead. :smile:

norefice-github commented 1 year ago

This is a very common ask from customers as many of them only have a portion of their apps containerized. I'd say it's worthwhile to have PM consider this further.

cdupuis commented 9 months ago

This has been shipped with 0.24.1.