Re: [atomic-devel] Atomic Scanner

[Daniel J Walsh <dwalsh redhat com>]

On 05/02/2016 01:09 PM, Scott Collier wrote:
> On 05/02/2016 12:06 PM, Josh Berkus wrote:
> > On 05/02/2016 10:03 AM, Scott Collier wrote:
> > > On 05/02/2016 11:59 AM, Josh Berkus wrote:
> > > > On 05/02/2016 06:10 AM, Daniel J Walsh wrote:
> > > > > http://developers.redhat.com/blog/2016/05/02/introducing-atomic-scan-container-vulnerability-detection/ 
> > > >
> > > > Where's the upstream project for this?
> > >
> > > https://github.com/projectatomic/atomic
> >
> > Ah, it's part of Atomic CLI?  Wasn't quite clear on that ...
>
> yes.  in particular, here's the plugin:
>
> https://github.com/projectatomic/atomic/blob/master/Atomic/scan.py
>
>
> >
Brent is doing most of the work on this, and he is planning a second 
blog on how to write your own scanners.

He has examples that just list rpm content and another one which will 
run a sosreport on each container image.

We hope to eventually work with other third party scanners.