xygeni/xygeni_scanner repository overview

Xygeni Scanner - Stop attacks to the software supply chain !

Xygeni is a platform for software supply chain security. The scanner analyzes your software for issues that bad actors may exploit to introduce malware in your software, and recommends blocking or mitigating actions to reduce the risk.

This image provides a convenient way to run an "ephemeral" scanner with all dependencies installed.

You may run the image, for example based on this docker-compose.yml:

version: '3.8'
services:
  xygeni_scanner:
    image: xygeni/xygeni_scanner:latest
    container_name: xygeni
    command: scan -n $PROJECT_NAME --dir /app
    environment:
      - PROJECT_NAME=${PROJECT_NAME}
      - XYGENI_TOKEN=${XYGENI_TOKEN}
    volumes:
      - "${PATH_TO_SCAN}:/app"
    tty: true

Which mounts the directory to scan (PATH_TO_SCAN) and the name for the target software (PROJECT_NAME, leave empty for autodetect).

NOTE: You need a valid access token⁠ for the scanner.

For more details, go https://xygeni.io⁠.