aboutcode-org / aboutcode-org/scancode.io
Docker dependency graph as pipe(line)
- Dominant language
- Python
- Stars
- 215
- Forks
- 203
- Avg merge
- 4d 8h
- Merged PRs (30d)
- 6
Description
This is a feature that would be very useful for orgs that have a lot of dockers and are trying to switch to some common base images (like we do @ ONAP)
Coming back to models discussion- one thing that would be useful towards this is having some enum in project that would keep info about what kind of input was given (rootfs/container/codebase/etc) allowing to filter container images only but checking if a pipeline inherits from e.g. Docker pipeline could also be used.
It would take list of scanned projects or a regex to match scanned projects and produce a dot graph of dependencies just as justone/dockviz but without docker.sock dependency.
Contributor guide
Assessment
This issue has not been assessed yet.