image-metadata-collector

Contributing

We are looking forward to contributions. Take a look at our Contribution Guidelines before submitting Pull Requests.

Responsible Disclosure and Security

The SECURITY.md includes information on responsible disclosure and security related topics like security patches.

Development

Local run

go run cmd/collector/main.go  --storage fs --environment-name test

Test

go test ./...

Image Collector Integration Test

To perform integration tests for the image collector, you need a kind cluster:

cd test_actions/imagecollector
kind delete cluster; kind create cluster && ./setup.bash

Legal Notice

The purpose of the ClusterImageScanner is not to replace the penetration testers or make them obsolete. We strongly recommend running extensive tests by experienced penetration testers on all your applications. The ClusterImageScanner is to be used only for testing purpose of your running applications/containers. You need a written agreement of the organization of the environment under scan to scan components with the ClusterScanner.

Author Information

This project is developed by Signal Iduna and SDA SE.