scancode.io icon indicating copy to clipboard operation
scancode.io copied to clipboard

Docker dependency graph as pipe(line)

Open aalexanderr opened this issue 2 years ago • 0 comments

This is a feature that would be very useful for orgs that have a lot of dockers and are trying to switch to some common base images (like we do @ ONAP) Coming back to models discussion- one thing that would be useful towards this is having some enum in project that would keep info about what kind of input was given (rootfs/container/codebase/etc) allowing to filter container images only but checking if a pipeline inherits from e.g. Docker pipeline could also be used.

It would take list of scanned projects or a regex to match scanned projects and produce a dot graph of dependencies just as justone/dockviz but without docker.sock dependency.

aalexanderr avatar Sep 14 '21 15:09 aalexanderr