Identify and highlight any images that contain known security vulnerabilities.Scan and inventory open source in images as they are instantiated in a container-orchestration platform.OpsSight helps you prevent known open source vulnerabilities from being deployed into production environments. The Black Duck OpsSight Connector (ose-scanner) automates the discovery of open-source components and security vulnerabilities in container images as they are instantiated in container-orchestration platforms. Legacy content below ~ only for archival purposes.

You can contact our development team directly as well. Feel free to get involved and create an issue on any of them if you have any questions. These can be adopted and recomposed in any manner, and are all ASF licensed. OpsSight now has a 'pure' upstream implementation and is thus broken up into several microservices that are composable, and developed in a pure, non-proprietary manner (and also useable out of the box), and exist in their own independent development lifecycles. Also feel free to contact for a demo! The Perceptor open-source project (the upstream source of OpsSight) If you have questions feel free to use the contact list there, or just file an upstream issue.

The downstream implementation of this project, hosted by Synopsys (Black Duck) is here.

Thanks to everyone, especially Tim Mackey, for all the hard work on this great product! The OpsSight product The original 1.x ose-scanner has now been replaced with the OpsSight 2x product (based on the Black Duck 'Perceptor' upstream project for distributed cloud-native security scanning).

Black duck open source scan