This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Revenera Community
- :
- Code Insight
- :
- Code Insight Forum
- :
- Re: Scanning Docker Files
Subscribe
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Subscribe
- Mute
- Printer Friendly Page
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
Jun 28, 2019
04:54 PM
Scanning Docker Files
The Flexera CodeInsight product datasheet (https://www.flexerasoftware.com/media/datasheets/datasheet-fci.pdf) says it can identify open source components in Docker Containers. After some testing, I am seeing results that are incomplete in identifying open source components within a simple project.
I found an article which discusses containers and license compliance (https://lwn.net/Articles/752982/). The article mentioned that VMWare has started a project to be able to the create of a bill of materials (BOM) for a container image (https://github.com/vmware/tern). Flexera can look how to use this tool to improve their product.
(1) Reply
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
Jul 15, 2019
11:31 AM
Thanks for the suggestion. I'll pass it along to our product team!!
Cheers,
Dave McLoughlin
![](/skins/images/8CE4FAD0DE6F3A6F9D0567434D2D2DAE/responsive_peak/images/icon_anonymous_message.png)