Skip to content

feature: container-scan command to trivy scan containers - #191

Closed
franciscoovazevedo wants to merge 5 commits into
mainfrom
trivy-container-scan
Closed

feature: container-scan command to trivy scan containers#191
franciscoovazevedo wants to merge 5 commits into
mainfrom
trivy-container-scan

add container-scan command to trivy scan containers

c8c5182
Select commit
Loading
Failed to load commit list.
Codacy Production / Codacy Static Code Analysis required action Jan 19, 2026 in 0s

1 new security issue (0 max.).

Codacy Here is an overview of what got changed by this pull request:

Issues
======
- Added 4
           

Complexity increasing per file
==============================
- cli-v2.go  1
- cmd/container_scan.go  10
         

See the complete overview on Codacy

Annotations

Check notice on line 1 in cmd/container_scan.go

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

cmd/container_scan.go#L1

should have a package comment

Check warning on line 54 in cmd/container_scan.go

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

cmd/container_scan.go#L54

Method runContainerScan has 52 lines of code (limit is 50)

Check warning on line 54 in cmd/container_scan.go

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

cmd/container_scan.go#L54

parameter 'cmd' seems to be unused, consider removing or renaming it as _

Check failure on line 80 in cmd/container_scan.go

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

cmd/container_scan.go#L80

OS command injection is a critical vulnerability that can lead to a full system compromise as it may allow an adversary to pass in arbitrary commands or arguments to be executed.