log4j-sniffer

log4j-sniffer copied to clipboard

Add a way to suppress flagging good log4j files as potentially vulnerable if renamed

6

It would help if we had a way to suppress these matches (produced by the crawl command) when the application owner has upgraded to log4j-core-2.17.1.jar but renamed the file. In...

mcainx

Implement docker image scan command

1

Implements a docker command that scans all locally stored images from the docker daemon. The docker functionality is purely focused on exporting the image tarballs to disk and scanning them...

gcampbell12

The tool doesn't ignore subdirectories on Windows hosts, using the `--ignore-dir` argument as currently documented: ``` --ignore-dir strings Specify directory pattern to ignore. Use multiple times to supply multiple patterns....

dicconb

###### _excavator_ is a bot for automating changes across repositories. Changes produced by the go/godel-update-version-oss check. To enable or disable this check, please contact the maintainers of Excavator.

svc-excavator-bot

Where is log4j-sniffer installed in Ubuntu Linux?

1

I installed "go" and "log4j-sniffer" successfully. Tried to run "log4j-sniffer" in UbuntuLinux from my Sysadmin folder and got a message "command not found". Please advise.

nlecrenn