scancode.io
scancode.io copied to clipboard
Docker dependency graph as pipe(line)
This is a feature that would be very useful for orgs that have a lot of dockers and are trying to switch to some common base images (like we do @ ONAP) Coming back to models discussion- one thing that would be useful towards this is having some enum in project that would keep info about what kind of input was given (rootfs/container/codebase/etc) allowing to filter container images only but checking if a pipeline inherits from e.g. Docker pipeline could also be used.
It would take list of scanned projects or a regex to match scanned projects and produce a dot graph of dependencies just as justone/dockviz but without docker.sock dependency.