Add ability to download container images when not available locally

snyk / leaky-vessels-static-detector

Static detection tool for runc and Docker "Leaky Vessels" vulnerabilities

https://snyk.io/blog/leaky-vessels-docker-runc-container-breakout-vulnerabilities/

Apache License 2.0

94 stars 17 forks source link

Add ability to download container images when not available locally #16

Closed audip closed 3 months ago

audip commented 3 months ago

Static detector tool lacks the ability to pull images and only performs analysis on the container image available on the system. This PR adds ability to download container images using the docker daemon process to perform analysis on the base image.

Please let me know what y'all think. Happy to discuss and get this merged in