mainmethod/dependency-check repository overview

⁠Description

Easy to use OWASP Dependency-Check Docker Image with always up to date Vulnerability Database.

⁠Pros

1. Small Image Size
2. Updates of Vulnerability Database every 6 hours
3. Small update size on docker pull as only relevant layers are updated

⁠Usage

Just specify an input folder, with the libraries you want to scan, and an output folder where you would like to receive the reports.

The command below mounts the current path as input as well as output, but you can choose other folders as well.

docker run --volume $(pwd):/input --volume $(pwd):/output mainmethod/dependency-check

Note: If you get [ERROR] Error generating the report for the output folder is not writable. Please create the output folder with correct permissions before starting this container.

⁠Dockerfile

Corresponding Docker File can be found here: https://github.com/Main-Method-GmbH/dependency-check/blob/master/Dockerfile⁠