https://github.com/kost/dockscan

dockscan is security vulnerability and audit scanner for Docker installations
https://github.com/kost/dockscan

Last synced: 28 days ago
JSON representation

dockscan is security vulnerability and audit scanner for Docker installations

• Host: GitHub
• URL: https://github.com/kost/dockscan
• Owner: kost
• License: gpl-2.0
• Created: 2015-11-13T04:04:45.000Z (about 9 years ago)
• Default Branch: master
• Last Pushed: 2016-08-27T13:49:38.000Z (over 8 years ago)
• Last Synced: 2024-10-30T23:03:49.097Z (about 1 month ago)
• Language: Ruby
• Size: 79.1 KB
• Stars: 217
• Watchers: 17
• Forks: 40
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md

Awesome Lists containing this project

• awesome-hacking-lists - kost/dockscan - dockscan is security vulnerability and audit scanner for Docker installations (Ruby)

README

        
[![Build Status](https://travis-ci.org/kost/dockscan.png)](https://travis-ci.org/kost/dockscan)

[![Coverage Status](https://coveralls.io/repos/kost/dockscan/badge.png?branch=master)](https://coveralls.io/r/kost/dockscan?branch=master)

dockscan

===========

![logo](https://raw.githubusercontent.com/kost/dockscan/master/docs/dockscan.png)

Scan Docker installations for security issues and vulnerabilities.

## Features

- plugin based system for discovery, audit and reporting

- able to scan local and remote docker installations

- plugins are easy to write

## Requirements

- Ruby 2.0 or above (1.9.x does not work!)

- Ruby gem: docker-api (docker)

## Installation

You can install dockscan by installing dockscan gem:

`gem install dockscan`

## Usage

Typical usage for scanning docker installation.

If you wish to scan local Docker installation:

`dockscan unix:///var/run/docker.sock`

If you wish to scan remote Docker installation and produce HTML report:

`dockscan -r html -o myreport -v tcp://example.com:5422`

If you wish to scan remote Docker installation and produce text report:

`dockscan -r txt -o myreport -v tcp://example.com:5422`

## Environment variables

DOCKER_CERT_PATH will configure dockscan to use SSL

DOCKER_SSL_VERIFY if set to false will not verify certificates.

### ToDo

- [ ] Implement web frontend for scanner

- [ ] Progress bars

### Done

- [x] Different reporting (HTML, txt, ...)