{"id":15954788,"url":"https://github.com/tembleking/sysdig-cli-scanner-nix","last_synced_at":"2025-04-04T06:43:33.191Z","repository":{"id":250050858,"uuid":"833319859","full_name":"tembleking/sysdig-cli-scanner-nix","owner":"tembleking","description":null,"archived":false,"fork":false,"pushed_at":"2025-03-25T01:55:06.000Z","size":21,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-03-25T02:38:35.432Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Nix","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tembleking.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-07-24T19:51:22.000Z","updated_at":"2025-03-25T01:55:10.000Z","dependencies_parsed_at":"2024-08-12T02:45:01.930Z","dependency_job_id":"2ebf5c84-e933-4287-8cc8-4260373a026a","html_url":"https://github.com/tembleking/sysdig-cli-scanner-nix","commit_stats":null,"previous_names":["tembleking/sysdig-cli-scanner-nix"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tembleking%2Fsysdig-cli-scanner-nix","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tembleking%2Fsysdig-cli-scanner-nix/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tembleking%2Fsysdig-cli-scanner-nix/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tembleking%2Fsysdig-cli-scanner-nix/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tembleking","download_url":"https://codeload.github.com/tembleking/sysdig-cli-scanner-nix/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247135126,"owners_count":20889420,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-07T13:19:46.698Z","updated_at":"2025-04-04T06:43:33.167Z","avatar_url":"https://github.com/tembleking.png","language":"Nix","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Sysdig CLI Scanner Nix Flake\n\nThis repository provides a Nix flake for managing [Sysdig's sysdig-cli-scanner](https://docs.sysdig.com/en/docs/installation/sysdig-secure/#vulnerability-pipeline-scanning) on Nix-based systems.\n\nThe `sysdig-cli-scanner` is a versatile tool used for scanning container images and directories, whether they are located locally or remotely. It supports both Vulnerability Management (VM) mode for image scanning and Infrastructure as Code (IaC) mode for scanning directories.\n\n## Installation\n\nTo install the sysdig-cli-scanner package using this flake:\n\n### In non-NixOS systems\n\nUse Nix to install the package in your profile:\n\n```sh\nnix profile install github:tembleking/sysdig-cli-scanner-nix#sysdig-cli-scanner\n````\n\n### In NixOS systems\n\nAdd this flake as an input in your `flake.nix`:\n\n```nix\n{\n    inputs = {\n        sysdig-cli-scanner = {\n              url = \"github:tembleking/sysdig-cli-scanner-nix\";\n              inputs.nixpkgs.follows = \"nixpkgs\";\n        };\n    };\n}\n```\n\nAdd the overlay and the package to your `configuration.nix`:\n\n```nix\n{\n    config,\n    pkgs,\n    ...\n}@ inputs: {\n    nixpkgs.overlays = [ inputs.sysdig-cli-scanner.overlays.default ];\n\n    environment.systemPackages = [\n      sysdig-cli-scanner  \n    ];\n}\n```\n\n## Running the scanner\n\nYou can run sysdig-cli-scanner to scan images or IaC resources:\n\n### For VM mode (Image Scanning)\n\n```sh\nSECURE_API_TOKEN=\u003cyour-api-token\u003e sysdig-cli-scanner --apiurl \u003csysdig-api-url\u003e \u003cimage-name\u003e\n```\n\n### For IaC mode (Directory Scanning)\n\n```sh\nSECURE_API_TOKEN=\u003cyour-api-token\u003e sysdig-cli-scanner --iac --apiurl \u003csysdig-api-url\u003e \u003cpath-to-scan\u003e\n```\n\n## Documentation\n\nFor other usage examples, refer to the [official Sysdig CLI Scanner documentation](https://docs.sysdig.com/en/docs/installation/sysdig-secure/install-vulnerability-cli-scanner/).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftembleking%2Fsysdig-cli-scanner-nix","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftembleking%2Fsysdig-cli-scanner-nix","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftembleking%2Fsysdig-cli-scanner-nix/lists"}