tgbenson/security-image repository overview

Image is build on Ubuntu.

This image is to be used to:

• Compile source code suing Maven with checks for OWASP Dependency-checks
• Run scans against Javascript for vulnerable dependencies using Retire.JS
• Run scans using eslint with security checks

Installs:

• Sonar Scanner
• OpenJDK
• Firefox
• NPM
• Maven
• eslint
• Retire.JS
• eslint-plugin-scanjs-rules
• eslint-plugin-no-unsafe-innerhtml
• https://github.com/18F/compliance-toolkit.git⁠
• https://github.com/gauntlt/gauntlt⁠
• https://github.com/drwetter/testssl.sh.git⁠