Provide container security scan -

[de-jcup]

It would be nice to have possibility to do container scans by sechub

{
  "apiVersion": "1.0",

  "server"   : "https://sechub.example.org",
  "user"     : "alice",

  "project"  : "gamechanger",

  "containerScan"  : {
       "images": ["testme/bad-dockerfile"]
  }
}

First adapter implementation could be done for Clair (OSS).

• https://github.com/quay/clair
• https://nullsweep.com/docker-static-analysis-with-clair/

---

^{Albert Tregnaghi albert.tregnaghi@daimler.com, Daimler TSS GmbH, imprint}

[de-jcup]

Hmm.. for podman and docker this would be a correct and nice configuration setup, but what about other container technologies- is the "images" path still valid in other cases. Maybe we need something like a "type" field and default is "docker/podman" ?