{"id":13842293,"url":"https://github.com/dosec-cn/harbor-scanner","last_synced_at":"2025-07-11T15:30:39.741Z","repository":{"id":46587806,"uuid":"217503852","full_name":"dosec-cn/harbor-scanner","owner":"dosec-cn","description":"一个免费的镜像漏洞扫描工具, 可以扫描镜像中已安装软件包的漏洞，支持中文漏洞库，可与 Harbor 无缝集成。","archived":false,"fork":false,"pushed_at":"2022-07-19T12:34:39.000Z","size":16,"stargazers_count":105,"open_issues_count":1,"forks_count":15,"subscribers_count":5,"default_branch":"master","last_synced_at":"2024-11-21T13:34:04.950Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dosec-cn.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-10-25T09:50:53.000Z","updated_at":"2024-11-19T06:30:53.000Z","dependencies_parsed_at":"2022-07-20T04:02:19.840Z","dependency_job_id":null,"html_url":"https://github.com/dosec-cn/harbor-scanner","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/dosec-cn/harbor-scanner","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dosec-cn%2Fharbor-scanner","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dosec-cn%2Fharbor-scanner/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dosec-cn%2Fharbor-scanner/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dosec-cn%2Fharbor-scanner/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dosec-cn","download_url":"https://codeload.github.com/dosec-cn/harbor-scanner/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dosec-cn%2Fharbor-scanner/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264840310,"owners_count":23671633,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:01:31.295Z","updated_at":"2025-07-11T15:30:39.455Z","avatar_url":"https://github.com/dosec-cn.png","language":null,"funding_links":[],"categories":["Others","Others (1002)"],"sub_categories":[],"readme":"# Harbor-Scanner\n\n一个免费的镜像漏洞扫描工具, 可以扫描镜像中已安装软件包的漏洞，支持中文漏洞库，可与 [Harbor](https://github.com/goharbor/harbor) 无缝集成。\n\n\u003e Dosec 的商业客户可以使用企业版扫描功能，例如扫描开源框架中的漏洞以及扫描容器镜像中包含的敏感数据。同时企业版增加了WEB UI, 提供仪表板，资产管理，用户管理，镜像漏洞修复建议, 安全和策略评估报告，容器运行时防护，Docker 和 Kubernetes 合规检查以及其他功能和模块。\n\n## 特点\n\n* 漏洞扫描快速准确，支持CVE和CNNVD双漏洞编号，漏洞中文描述信息\n* 自动更新漏洞库(在配置中开启自动更新参数)\n* 快速部署使用，最新的发布版中已包含最近日期之前的全量漏洞库，安装完成即可立即扫描出结果\n\n## 安装\n\n推荐将 Harbor-Scanner 和 Harbor 镜像仓库部署在同一台服务器。\n\n1. 下载 Harbor-Scanner 的离线安装包并解压\n\n    ```shell\n    wget https://github.com/dosec-cn/harbor-scanner/releases/download/v1.3/dosec-scanner.tgz\n    # 解压\n    tar zxf dosec-scanner.tgz\n    # 进入项目\n    cd dosec-scanner\n    ```\n\n2. 运行 Install 脚本\n\n    \u003e 需要提前安装 docker-compose\n\n    ```shell\n    ./Install.sh\n    ```\n\n3. 配置 Harbor 仓库\n\n    登录 Harbor 管理界面 -\u003e 审查服务 -\u003e 扫描器 -\u003e 新建扫描器\n\n    ![新建扫描工具](http://img.dosec.cn/20191223112547.png)\n\n    填写扫描器配置 -\u003e 点击 ADD 确认添加\n\n    ![扫描工具配置](http://img.dosec.cn/20200112194526.png)\n\n    ① 填写扫描工具的名称\n\n    ② 填写扫描工具的 IP 和端口\n\n    ③ 测试 Harbor 和扫描工具是否能正常连接\n\n    ④ 只有测试连接成功后才能添加\n\n## 自定义配置\n\n可根据需要更改 `docker-compose.yaml` 文件\n\n```yaml\nversion: '2.2'\n\nservices:\n  dosec-db-hb:\n    image: hub.dosec.cn/library/dosec-db-hb:2022-07-07T16.56.50V2.0-20220706\n    restart: always\n\n  dosec-scannerapp:\n    depends_on:\n      - dosec-db-hb\n    image: hub.dosec.cn/library/dosec-scannerapp:2022-07-19T13.14.25V1.0.1_prod\n    # 默认映射了主机的 8899 端口\n    ports:\n      - \"8899:8899\"\n    restart: always\n    # 默认将程序日志映射到了主机的 /var/log/dosec-scanner 目录\n    volumes:\n      - /var/log/dosec-scanner:/dosec/log\n\n  dosec-scanner-hb:\n    depends_on:\n      - dosec-db-hb\n      - dosec-scannerapp\n    image: hub.dosec.cn/library/dosec-scanner-hb:2022-07-19T13.04.06V1.3_release\n    # command: [\"-update_cve\"]\n    # 默认注释了在线更新 CVE 功能, 会消耗大量 CPU 和内存\n    restart: always\n    # 默认将程序日志映射到了主机的 /var/log/dosec-scanner 目录\n    volumes:\n      - /var/log/dosec-scanner:/dosec/log\n```\n\n## 卸载\n\n进入 Harbor-Scanner 项目目录, 执行以下命令即可完全卸载\n\n```shell\ndocker-compose down\n```\n\n## 支持扫描的操作系统\n\n- Debian \u003e= 7, unstable\n- Ubuntu LTS releases \u003e= 12.04\n- Red Hat Enterprise Linux \u003e= 5\n- CentOS \u003e= 5\n- Alpine \u003e= 3.3\n- Oracle Linux \u003e= 5\n\n## Dosec 安全产品对比\n\n|        功能        |   Harbor-Scanner   | [镜界容器安全防护平台](https://www.dosec.cn/) |\n| ------------------ | :----------------: | :-------------------------------------------: |\n| 许可               |        免费        |                    企业版                     |\n| 支持与 Harbor 集成 | :heavy_check_mark: |               :heavy_check_mark:              |\n| 系统软件包漏洞扫描 | :heavy_check_mark: |               :heavy_check_mark:              |\n| 开源组件漏洞扫描   |                    |               :heavy_check_mark:              |\n| 恶意软件扫描       |                    |               :heavy_check_mark:              |\n| 敏感数据扫描       |                    |               :heavy_check_mark:              |\n| 镜像配置检查       |                    |               :heavy_check_mark:              |\n| 镜像历史行为分析   |                    |               :heavy_check_mark:              |\n| 阻止非信任镜像运行 |                    |               :heavy_check_mark:              |\n| 运行时保护         |                    |               :heavy_check_mark:              |\n| 合规检查           |                    |               :heavy_check_mark:              |\n\n## 社区交流\n\n**微信群**: Harbor-Scanner 交流群, 扫描社区成员微信二维码, 添加时请备注姓名-公司/学校/组织/机构等。\n\n![二维码](http://img.dosec.cn/2019_10_28_1838167633.png)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdosec-cn%2Fharbor-scanner","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdosec-cn%2Fharbor-scanner","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdosec-cn%2Fharbor-scanner/lists"}