Exploring each layer in a docker image
Home Page: https://diving.npmtrend.com/
License: Apache License 2.0
Using diving you can analyze docker image on the website. It use dive to get the analyzed information.
The first time may be slow, because it pulls the image first.
docker run -d --restart=always \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 7001:7001 \
vicanso/diving
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
when the image Processing complete，the js print an error:
typeError :cannot read property 'split' of undefined
at a.value (App.js:344)
at render (App.jsL382)
扫描私有仓库的镜像界面上会报错exit 1，是不是因为要登录一下
first into web is ok. input the image's name and enter search, it is broken.
say: Cannot read property 'trim' of undefined
检测到 vicanso/diving 一共引入了437个开源组件，存在4个漏洞
漏洞标题：jwt-go 安全漏洞
缺陷组件：github.com/dgrijalva/[email protected]+incompatible
漏洞编号：CVE-2020-26160
漏洞描述：jwt-go是个人开发者的一个Go语言的JWT实现。
jwt-go 4.0.0-preview1之前版本存在安全漏洞。攻击者可利用该漏洞在使用[]string{} for m[\"aud\"](规范允许)的情况下绕过预期的访问限制。
影响范围：(∞, 4.0.0-preview1)
最小修复版本：4.0.0-preview1
缺陷组件引入路径：github.com/vicanso/diving@->github.com/dgrijalva/[email protected]+incompatible
另外还有4个漏洞，详细报告：https://mofeisec.com/jr?p=a57030
你好，我在扫描红帽官方镜像的时候registry.redhat.io/rhscl/nodejs-14-rhel7:1-51
前端页面有一个bug，应该是解析命令行的时候没做空判断
修正如下
if (typeof(text) != 'undefined'){
text.split(";").forEach(function(value) {
const tmpResult = [];
value.split("&&").forEach(function(item) {
if (item) {
tmpResult.push(item);
}
});
if (tmpResult.length) {
result.push(tmpResult.join("&& \\ \n"));
}
});
}另外建议国内构构建的朋友可以在dockerfile中增加镜像源，否则出奇的慢。。。
FROM node:16-alpine as webbuilder
ADD ./ /diving
RUN cd /diving/web \
&& npm config set registry https://registry.npm.taobao.org \ # 增加 npm国内镜像源
&& npm i \
&& npm run build \
&& rm -rf node_module
FROM golang:1.17-alpine as builder
COPY --from=webbuilder /diving /diving
RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories \ # APK增加 国内镜像源
&& apk update \
&& apk add docker git gcc make \
&& cd /diving \
&& rm -rf asset/dist \
&& cp -rf web/build asset/dist \
&& make build
FROM alpine
EXPOSE 7001
COPY --from=builder /usr/bin/docker /usr/bin/docker
COPY --from=builder /diving/diving /usr/local/bin/diving
COPY --from=builder /diving/entrypoint.sh /entrypoint.sh
CMD ["diving"]
ENTRYPOINT ["/entrypoint.sh"]
HEALTHCHECK --interval=10s --timeout=3s \
CMD diving --mode=check || exit 1
最后谢谢作者开发的项目
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.