oscap-podman8
Tool for offline scap evaluation of podman container images and podman containers
Overview
oscap-podman runs oscap tool on a given container image or container.
This script cannot run in rootless mode.
Usage
Usage of the tool mimics usage and options of oscap(8) tool.
Compliance scan of Podman container image:
oscap-podman [--oscap=<OSCAP_BINARY>] IMAGE_NAME OSCAP_ARGUMENT [OSCAP_ARGUMENT...]
Compliance scan of Podman container:
oscap-podman [--oscap=<OSCAP_BINARY>] CONTAINER_NAME OSCAP_ARGUMENT [OSCAP_ARGUMENT...]
Refer to oscap(8) to learn about OSCAP_ARGUMENT options.
Releases
Unchanged in 3 releases since Debian 12 (Bookworm).