Quayio Scanner translates critical vulnerabilities in running docker containers into Sensu check results to transform vulnerability scans into actionable alerts.
Add this line to your application's Gemfile:
gem 'quayio-scanner'And then execute:
$ bundle
Or install it yourself as:
$ gem install quayio-scanner
This plugin attempts to fetch vulnerabilities for all running containers
| Parameter | Description |
|---|---|
| -d URL | Docker URL |
| -t TOKEN | Quay.io oauth token |
| -w WHITELIST[,WHITELIST] | Vulnerability whitelist |
| -n NAMESPACE[,NAMESPACE] | Namespaces (quay.io scanners) to ignore |
$ check-container-vulnerabilities.rb --docker-url unix:///var/run/docker.sock --quayio-token AccessTokenGoesHere
Bug reports and pull requests are welcome on GitHub at https://github.com/aboutsource/quayio-scanner.
The gem is available as open source under the terms of the MIT License.
Copyright 2019 - present Florian Frank - The gem json is distributed under the Ruby License.