SCA as Docker

[Mark_Egloff]

We are doing DevOps with Docker. Terefore we like to use SCA as a docker image which also can be called from a Jenkins server via command line, maven or via the jenkins plugin.

We like to know if already such docker images exists and if not if somebody knows if this is planned for the product roadmap of SCA and if yes in which release / year it may become available? Thx

[JuliaVII]

It would be really nice to have a native SCA docker image. Until them, where i work we create our own images. Is very straightforward to build one, but depending of what you pretend to do i would suggest one image that combines a jenkins slave to perform the sca translate, and maybe send it to another machine to perform the scan. 

Besides SCA, ive found this channel with some images as SSC and Cloudscan that can be useful. https://github.com/therealchunt

[Amrityam_Rout]

We are using Fortify SCA inside docker.we have created Fortify docker image.

[SDFortifyUser]

Sharing is caring. 😉

I'm working on something myself right now, however I need to explore docker more.

[Amrityam_Rout]

Happy to share if you need in any help or information.

[SDFortifyUser]

I would appreciate any information you can share. I sent you a PM with more details. Of course, whatever we come up with I'll be sure to share here on the main thread. I know others could really use this information. We all learn from each other the more we share.

[Amrityam_Rout]

Please check my git link for fortify SCA docker image.Hope it will help you.