cr0hn / dockerscan

Docker security analysis & hacking tools

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

What is the target for scan command?

starnightcyber opened this issue · comments

To use dockerscan image sub-command, we need to give a image file.
And it just works fine.

# dockerscan image info ./mysql.tar

But when i use dockerscan scan sub-command, it doesn't.

[root@localhost docker]# dockerscan scan --help
Usage: dockerscan scan [OPTIONS] TARGET

  Search for Open Docker Registries

Options:
  -t, --timeout TEXT  timeout for each port-check
  -p, --ports TEXT    ports to test. i.e: 80,443,8000-8080
  -c TEXT             Maximum concurrency scans
  -h, --help          Show this message and exit.
[root@localhost docker]# dockerscan scan mysql.tar 
[ * ] Starting the scanning
[ * ]  !! [Errno -2] Name or service not known

I wonder what is the target for the command, any example for me ? Thanks!

Managed to solve, @starnightcyber? I have the same problem.

No.
It seems 'scan sub-command' does not available .
And I recommend three docker-scan tools for you:

  • docker-bench-security
  • clair
  • anchore

you can find them in github.

Thank you very much, I have already tested the suggested tools, they are great.

OK. You are welcome.