From 9b4f63b0e9730d8a047be8dafda4c618d608f08c Mon Sep 17 00:00:00 2001 From: 0xbad53c <74974697+0xbad53c@users.noreply.github.com> Date: Thu, 11 Aug 2022 22:05:57 +0200 Subject: [PATCH 1/3] Create Dockerfile --- Dockerfile | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 Dockerfile diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..dd57f1a --- /dev/null +++ b/Dockerfile @@ -0,0 +1,4 @@ +FROM golang:latest + +RUN go get -u github.com/visma-prodsec/confused +ENTRYPOINT ["confused"] From 01ff7988c95f922131775125dbeba17fd8ab13b2 Mon Sep 17 00:00:00 2001 From: 0xbad53c <74974697+0xbad53c@users.noreply.github.com> Date: Thu, 11 Aug 2022 22:07:57 +0200 Subject: [PATCH 2/3] Update README.md --- README.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/README.md b/README.md index 5e749b6..77d0582 100644 --- a/README.md +++ b/README.md @@ -91,3 +91,17 @@ Issues found, the following packages are not available in public package reposit [!] internal/_package2 ``` + +## Docker version +### Build container +``` +docker build . -t confused +cd /directory/to/test +docker run --rm -v "$(pwd):/src" confused -l npm /src/package.json +``` + +### Scanning package.json and pom.xml in projects with multiple subdirectories +``` +find . -name package.json -exec bash -c 'cd "$(dirname {})" && echo "testing {}" && docker run --rm -v "$(pwd):/src" confused -l npm /src/package.json' \; +find . -name pom.xml -exec bash -c 'cd "$(dirname {})" && echo "testing {}" && docker run --rm -v "$(pwd):/src" confused -l mvn /src/pom.xml' \; +``` From 6e2f803c9f55f771ebe666dfb30f568c8e900cc3 Mon Sep 17 00:00:00 2001 From: 0xbad53c <74974697+0xbad53c@users.noreply.github.com> Date: Thu, 11 Aug 2022 22:15:05 +0200 Subject: [PATCH 3/3] Update Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index dd57f1a..6a28dd6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ FROM golang:latest -RUN go get -u github.com/visma-prodsec/confused +RUN go install github.com/visma-prodsec/confused@latest ENTRYPOINT ["confused"]