Run source code security analysis with CERN tool RATS.
2.2K
Docker RATS source code analyzer.
Run source code security analysis (i.e. for ISO 27001 compliance) with CERN tool RATS analysis tool.
This project at Dockerhub: https://hub.docker.com/r/ociotec/rats
RATS web page: https://security.web.cern.ch/security/recommendations/en/codetools/rats.shtml
Usage example (source code to analyze is inside current folder $PWD, it's mounted with a volume inside container at /tmp/code):
docker run --rm --volume $PWD:/tmp/code ociotec/rats rats --resultsonly --warning 3 /tmp/code
This will output:
/tmp/code/src/test.c:131: Low: fopen
A potential race condition vulnerability exists here. Normally a call to this
function is vulnerable only when a match check precedes it. No check was
detected, however one could still exist that could not be detected.
Same example but the output will be in a HTML report:
docker run --rm --volume $PWD:/tmp/code ociotec/rats rats --resultsonly --warning 3 --html /tmp/code > rats.html
Content type
Image
Digest
Size
3.5 MB
Last updated
about 7 years ago
docker pull ociotec/rats