Package - snyk-docker-plugin

snyk-docker-plugin

Snyk CLI docker plugin

Last updated 6 years ago by snyk-admin .

Apache-2.0 · Repository · Bugs · Original npm · Tarball · package.json

$ gnpm install snyk-docker-plugin

SYNC missed versions from official npm registry.

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.

:information_source: This repository is only a plugin to be used with the Snyk CLI tool. To use this plugin to test and fix vulnerabilities in your project, install the Snyk CLI tool first. Head over to snyk.io to get started.

Snyk Docker CLI Plugin

This plugin provides dependency metadata for Docker images.

Supported functionality

Package managers:

rpm, apk, deb

Operating systems:

Debian, Red Hat, Alpine, Oracle, CentOS, SLES, OpenSUSE, Amazon Linux, vanilla Linux
Distroless and scratch images

Platforms:

Linux: ARM, AMD, PPC, MIPS, s390x

Image protocols:

Docker archive, OCI archive
pulling images from a Docker socket
pulling from container registries (with support for username and password authentication)

Applications:

Node (npm, yarn)
Java (jar files)
detecting package manager manifests (Python, Ruby)

Others:

Dockerfile analysis
identifying Node and Java binaries installed outside the package manager
running on Windows (not the same as scanning Windows containers)
collecting the rootFs hashes for base image detection and recommendation

Tests

Refer to test/README.md for running and writing tests.

Current Tags

6.8.3 ... latest (a year ago)

313 Versions

Maintainers (1)

Downloads

Today 0

This Week 0

This Month 660

Last Day 0

Last Week 250

Last Month 0

Dependencies (4)

debug ^4.1.1
dockerfile-ast 0.0.16
semver ^6.1.0
tslib ^1

Dev Dependencies (9)

@types/node ^8.10.48
@types/sinon 5.0.5
prettier ^1.17.1
sinon ^6
tap 12.3.0
ts-node ^8.1.0
tslint ^5.16.0
tslint-config-prettier ^1.18.0
typescript ^3.4.5

Dependents (1)

snyk

Copyright 2013 - present © cnpmjs.org | Home |