Run against image

[hijak]

Hi

Firstly thanks for this, an excellent idea. I was wondering how i can include this in my pipeline. I am already using trivy to scan the container for CVE's and this runs against the image ive built in the pipeline.

Is it possible to run bob against a docker image rather than running the container and downloading bob into it to run it that way (i am assuming this is the expected way to run it at the moment)

Thanks again

[brompwnie]

Hi @hijak,

No it is not possible as BOtB is not designed for this use-case as it is designed to identify and exploit particular anomalies that occur in running containers.

Cheers,

[hijak]

ah ok thanks anyway