aboutcode-org / aboutcode-org/scancode.io

Docker dependency graph as pipe(line)

Open
#324 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
215
Forks
203
Avg merge
4d 8h
Merged PRs (30d)
6

Description

This is a feature that would be very useful for orgs that have a lot of dockers and are trying to switch to some common base images (like we do @ ONAP)
Coming back to models discussion- one thing that would be useful towards this is having some enum in project that would keep info about what kind of input was given (rootfs/container/codebase/etc) allowing to filter container images only but checking if a pipeline inherits from e.g. Docker pipeline could also be used.

It would take list of scanned projects or a regex to match scanned projects and produce a dot graph of dependencies just as justone/dockviz but without docker.sock dependency.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.