Scan Docker installations for security issues and vulnerabilities.
- plugin based system for discovery, audit and reporting
- able to scan local and remote docker installations
- plugins are easy to write
- Ruby 2.0 or above (1.9.x does not work!)
- Ruby gem: docker-api (docker)
You can install dockscan by installing dockscan gem:
gem install dockscan
Typical usage for scanning docker installation.
If you wish to scan local Docker installation:
If you wish to scan remote Docker installation and produce HTML report:
dockscan -r html -o myreport -v tcp://example.com:5422
If you wish to scan remote Docker installation and produce text report:
dockscan -r txt -o myreport -v tcp://example.com:5422
DOCKER_CERT_PATH will configure dockscan to use SSL
DOCKER_SSL_VERIFY if set to false will not verify certificates.
- Implement web frontend for scanner
- Progress bars
- Different reporting (HTML, txt, ...)