EBest160185 (Community Member) asked a question.
Scanning a docker container mock-server - getting error
thank you in advance
Trying to scan the mock-server.com image and container - when scanning each I get a message and think "it requires a valid running app in the mock-server container", thoughts ??
IMAGE
Veracode SCA container scanning engine ready
Process “docker run -dt --rm --entrypoint /bin/sh mockserver/mockserver:latest” exited with non-zero-rc
CONTAINER:
Veracode SCA could not find any dependences in <containername>; please check if it is of a supported distribution, please also check that your update is possible.
.png){kind=logo}
Hi,
mock-server.com appears to use Googles "Distroless" Container Images: https://github.com/GoogleContainerTools/distroless (as seen here: https://github.com/mock-server/mockserver/blob/master/docker/local/Dockerfile#L8 ).
This means they do not include a shell nor package manager.
This is not supported by Veracode Software Composition Analysis, you can see a list of our supported distributions for Container Scanning here: https://docs.veracode.com/r/c_sc_container_scan .
Thank you,
Boy Baukema