openclarity / vmclarity

VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities
openclarity.io
Apache License 2.0
95 stars 22 forks source link

feat(plugin): enable binary plugin support #1794

Open zsoltkacsandi opened 3 weeks ago

zsoltkacsandi commented 3 weeks ago

Description

Added top-level binary_mode config to the plugin scanner family, and also to the individual plugin scanners, defaulting to false. If the top-level binary_mode config is explicitly specified, it'll overwrite the individual plugin-level ones.

If binary mode is enabled, it results in running the scanner plugins without the docker daemon, which means downloading the image (without docker pull), extracting its content to the machine, mounting the necessary directories of the host machine under the plugin filesystem and executing its entrypoint with chroot (details are in plugins/runner/internal/runtimehandler/binary/handler.go).

This solution is not intended for using it in production, but for testing purposes in dockerless environments (e.g. CI/CD pipelines).

Type of Change

Checklist

github-actions[bot] commented 3 weeks ago

Hey!

Your images are ready:

github-actions[bot] commented 3 weeks ago

Hey!

Your images are ready:

github-actions[bot] commented 1 week ago

Hey!

Your images are ready: