snyk / leaky-vessels-static-detector

Static detection tool for runc and Docker "Leaky Vessels" vulnerabilities
https://snyk.io/blog/leaky-vessels-docker-runc-container-breakout-vulnerabilities/
Apache License 2.0
94 stars 17 forks source link

Feature: ability to generate report in TSV format #17

Closed audip closed 3 months ago

audip commented 3 months ago

In addition to reporting the results to standard out for logging, this will generate a tab-separated values (TSV) file which can then be parsed and used for creating a ticket/slack-message or reporting to an alerting system

example:

Dockerfile  Result  Message
gh_data/myfitnesspal/repo-1/Dockerfile  0   no issues
gh_data/myfitnesspal/repo-2/docker/container1/Dockerfile    3   no issues in dockerfile but could not verify base image