The ose-scanner provides integration between Black Duck Hub and OpenShift v3. In the current implementation, pre-existing OpenShift images are automatically discovered and any ImageStream activity is monitored. When an image is discovered, the integration kicks off a Black Duck scan engine container to perform the scan and upload the results to your Black Duck Hub instance. Obviously this integration requires both OpenShift and Black Duck Hub!
All documentation, including compilation, installation and debugging instructions can be found on the wiki
This project is under active development and has had one official releases. We welcome all contributions, and anyone attempting to use the code contained in here should expect some rough edges and operational issues until release. If you identify an issue, please raise it, or better yet propose a solution.
- Contributions are best done via pull request.
- It's recommended to start small, and propose changes first. Raising an issue and holding a discussion will help reduce the iterations during PR review.
Part of any successful open source project is the ethos that the health of the community is more important than the code itself.
In that spirit, we adopt the values of Cris Nova's kubicorn project, which is both extremely successful and also an excellent example of how to build a community around an opensource infrastructure software (https://github.com/kris-nova/kubicorn).
We restate the kubicorn core values below and adopt them as our own:
- Infrastructure as software.
We believe that the oh-so important layer of infrastructure should be represented as software (not as code!).
- Rainbows and Unicorns
We believe that sharing is important, and encouraging our peers is even more important. Part of contributing to (ose_scanner) means respecting, encouraging, and welcoming others to the project.
Apache License 2.0