artifact-scanner

Artifact Scanner

This is a command-line tool for scanning and managing DevOps images, mainly used to scan images for vulnerabilities and synchronize results to Jira.

Features

• Scan container images and image bundles for vulnerabilities
• Automatically create and manage Jira tickets
• Automatically associate vulnerabilities of related images

Usage

Basic Usage

artifact-scanner scan [options]

Command Line Parameters

Configuration File

Configuration file (config.yaml) example:

registry:
  address: registry.example.com # Registry address to pull image

jira:
  baseURL: https://your-jira-instance.atlassian.net # Jira access URL
  username: your-jira-username # Jira username
  password: your-jira-password # Jira password

ops:
  baseURL: https://ops-api-instance # API address of the scanning system provided by operations team

users: # Maps user emails to Jira usernames and team name
- email: user1@example.com
  jira:
    user: user1 # jira user name
    team: team1 # jira user team

Workflow

1. Read configuration file to get Jira and OPS API access addresses
2. Read values file to get information about images to be scanned
3. Parse bundle images, scan each image for vulnerabilities
4. Calculate priority of Jira issues based on scan results
5. Create or update tickets in Jira:
   • Create parent ticket for the bundle
   • Create child tickets for each related image
   • Link parent tickets and child tickets