aboutcode-org / aboutcode-org/scancode.io

Kubernetes support and a few feature ideas

未关闭
#335 6 条评论 1 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
Python
星标
215
派生
203
平均合并
4 天 8 小时
30 天内合并 PR
6

描述

Hi!

I like the direction scancode.io is evolving to and would love to use it myself as part of my DevOps stack in kubernetes :)

Through my own deconstruction of your docker-compose, I've made this k8s manifests file, which should be able to deploy scancode.io as a kubernetes deployment. The input is of course the image built from your Dockerfile. Give it a try and let me know if it works correctly already (had to rename the file to a `.txt`, because `.yaml` is not supported as an attachment)
[k8s.txt](https://github.com/nexB/scancode.io/files/7274206/k8s.txt)

Also I wanted to briefly mention a few ideas...

1) In particular I'd love to get scancode.io running as a persistent service in kubernetes, where I can centrally schedule
scanning runs on my docker images in my private registry and also be able to draw up reports to stakeholders in the company.

2) Another really great feature would be to be able to point scancode to a github repository (e.g. https://github.com/nexB/scancode.io) and have it automatically download the main branch/latest release and perform a license scan on it, without manually uploading the zip/tar files of the releases

3) Ideally both of the previous scenarios would support on-demand triggers and scheduled runs

4) Also it would be great to have some sort of policy checks (e.g. like vulnerability policies in container vuln. scanners) where for each project (either a repository or docker image/VM) we could define a set of policies to have a project checked against. The result of a check would be either safe (passed), potentially safe (warning) or unsafe (failed), where each state would hold a custom defined set of licenses (e.g. permissive licenses for safe and any copyleft as unsafe) and they would be shown as such on the dashboard

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。