imagescan

Documentation

Overview

Package imagescan scans a local container image tarball (the output of `docker save` or an OCI image layout) for cryptography. An image is just layered filesystems: this package extracts the layers to a temp directory and runs the existing code and binary scanners over them — no new detection logic, images are simply another source.

Index

• func Scan(tars []string) ([]model.Finding, error)

Functions

func Scan

func Scan(tars []string) ([]model.Finding, error)

Scan extracts each image tarball and returns the crypto findings discovered in its layers. A tar that cannot be opened is reported to stderr and skipped.