Struct ContainerScanConfig 

pub struct ContainerScanConfig {
    pub docker_socket: String,
    pub max_image_size: u64,
    pub scan_layers: bool,
    pub check_dockerfile: bool,
    pub check_secrets: bool,
    pub check_packages: bool,
    pub dangerous_base_images: Vec<String>,
    pub suspicious_packages: Vec<String>,
    pub secret_patterns: Vec<String>,
}

Configuration for the container scanner.

Fields

docker_socket: String

Docker socket path.

max_image_size: u64

Maximum image size to scan (bytes).

scan_layers: bool

Scan image layers for malware signatures.

check_dockerfile: bool

Check for dangerous Dockerfile patterns.

check_secrets: bool

Check for hardcoded secrets in env vars and config.

check_packages: bool

Check for suspicious installed packages.

dangerous_base_images: Vec<String>

Known-dangerous base images.

suspicious_packages: Vec<String>

Suspicious packages that shouldn’t be in production images.

secret_patterns: Vec<String>

Secret patterns to detect in environment variables.

Trait Implementations

impl Clone for ContainerScanConfig

fn clone(&self) -> ContainerScanConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContainerScanConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ContainerScanConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ContainerScanConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ContainerScanConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.