8000 GitHub - Btodhunter/ci-demos: Examples of Docker image build pipelines, including vulnerability scanning with Anchore Engine
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Btodhunter/ci-demos

BranchesTags

Repository files navigation

Anchore CI Demos

Example of a container build pipeline, including an Anchore Engine image security scan

Contains a very simple Nodejs application, which is published to a registry as a runnable docker container.

After container is built, it is sent through an Anchore engine scan.

Example configurations for the following CI/CD tools

Reports provided by Anchore Engine

When Anchore scanning finishes, by default, the following reports are available as artifacts.

  • image-content-os-report.json - all OS packages installed in image.
  • image-content-python-report.json - all Python modules installed in image.
  • image-content-java-report.json - all Java modules installed in image.
  • image-vuln-report.json - all CVE's found in image.
  • image-details-report.json - image metadata utilized by Anchore engine.
  • image-policy-report.json - details of policy applied to the Anchore scan.

About

Examples of Docker image build pipelines, including vulnerability scanning with Anchore Engine

Resources

Readme
Activity

Stars

10 stars

Watchers

1 watching

Forks

4 forks
Report repository

Releases

No releases published

Packages

No packages published

Languages
0