embrasure/owasp-dependency-check repository overview

⁠Supported tags and respective Dockerfile links

• latest, 1.4.3 (Dockerfile)⁠
• 1.4.2 Dead. See https://github.com/jeremylong/DependencyCheck/issues/551⁠

⁠About owasp-dependency-check

An alpine container containing version 1.4.3 of the OWASP Dependency Check⁠ CLI, along with a pre-seeded database to speed up scans.

⁠Install

$ docker pull embrasure/owasp-dependency-check

⁠Usage

⁠run with default settings

$ docker run --rm -v <project_source>:/tmp/src -v <report_destination_directory>:/tmp/reports -w /tmp/src -w /tmp/reports embrasure/owasp-dependency-check

⁠run with additional arguments

$ docker run --rm -v <project_source>:/tmp/src -v <report_destination_directory>:/tmp/reports -w /tmp/src -w /tmp/reports embrasure/owasp-dependency-check --enableExperimental --disableBundleAudit "true"

⁠Optional Environment Variables

PROJECT_NAME Default "generic". Set the project name for the generated report.