Project Ideas Containers and VM Images Static Package Analysis

Containers and VM images static package analysis

The goal of this project is to further the Conan container static analysis tool to effectively support proper inventory of installed packages without running the containers.

This includes determining which packages are installed in Docker layers for RPMs, Debian or Alpine Linux in a static way. And this may eventually require the integration with ScanCode.

• Level

  • Advanced

• Tech

  • Python, Go, containers, distro package managers, RPM, Debian, Alpine

• URLS

  • https://github.com/nexB/conan

• Mentor

  • @JonoYang https://github.com/JonoYang