README.md

Sysdig LSP Features

Sysdig LSP provides tools to integrate container security checks into your development workflow.

Scan Base Image

• Scans the runtime base image specified in your Dockerfile for vulnerabilities.
• Supports single-stage and multi-stage Dockerfiles (final runtime stage only).

Code Lens Support

• Displays actionable commands directly within the editor (e.g., initiating base image scans).
• Enables quick access to frequently performed actions.

Build and Scan

• Builds and scans the entire final Dockerfile image used in production.
• Supports multi-stage Dockerfiles, analyzing final stage and explicitly copied artifacts from intermediate stages.

Layered Analysis

• Scans each Dockerfile layer individually for precise vulnerability identification.
• Supports detailed analysis in single-stage and multi-stage Dockerfiles.

Docker-compose Image Analysis

• Scans the images defined in your docker-compose.yml files for vulnerabilities.

Kubernetes Manifest Image Analysis

• Scans container images defined in Kubernetes manifest files for vulnerabilities.
• Supports Pods, Deployments, StatefulSets, DaemonSets, Jobs, and CronJobs.

Vulnerability Explanation

• Displays a detailed summary of scan results when hovering over a scanned image name.
• Provides immediate feedback on vulnerabilities, severities, and available fixes.

See the linked documents for more details.