Struct ContainerScanner 

pub struct ContainerScanner { /* private fields */ }

Scans Docker images for security issues.

Implementations

impl ContainerScanner

pub fn new(config: ContainerScanConfig) -> Self

pub fn docker_available() -> bool

Check if Docker is available.

pub fn inspect_image(image: &str) -> Option<Value>

Get image inspect JSON from Docker.

pub fn image_history(image: &str) -> Vec<HistoryEntry>

Get image history from Docker.

pub fn parse_image_info(inspect: &Value) -> Option<ImageInfo>

Parse image inspect JSON into ImageInfo.

pub fn scan_image(&self, image: &str) -> Vec<ScanResult>

Scan a Docker image for security issues.

pub async fn deep_scan_image( &self, image: &str, scanners: &[Arc<dyn Scanner>], ) -> Vec<ScanResult>

Scan a Docker image by saving and extracting its filesystem. This enables malware scanning of the actual file contents.