aomran102/cvst repository overview

⁠CVST - Container Vulnerability Scan Tool

CVST (Container Vulnerability Scan Tool) is an open-source application built on Trivy, designed to simplify container image vulnerability scanning. With a user-friendly web interface, CVST enables scanning of public and private container images, generates actionable reports in CSV and HTML formats. Ideal for developers, DevOps teams, and security professionals, CVST enhances container security with ease and efficiency.

⁠🚀 Key Features

• Web-Based Interface: Scan container images directly in your browser at http://localhost:5705.
• Multi-Image Scanning: Submit multiple image names for simultaneous scanning.
• Public & Private Image Support: Configure credentials to scan private registry images.
• Detailed Reports: Generate timestamped CSV and HTML reports for in-depth analysis.
• Powered by Trivy: Leverages Trivy's robust scanning engine for reliable results.
• Lightweight & Portable: Built on python:3.11-slim for minimal resource usage.

⁠🛠️ How It Works

CVST is distributed as a Docker image (aomran102/cvst:latest) and uses a Flask-based web server for its interface. Users input container image names, which are processed by a Bash script (trivy_scan.sh) that invokes Trivy to perform scans and generate reports. The application runs on port 5705 and supports reverse proxy configurations for flexible deployment.

⁠🏁 Getting Started

⁠1. Pull the Docker Image

docker pull aomran102/cvst:latest

⁠2. Run the Container

docker run -d -p 5705:5705 aomran102/cvst:latest

⁠3. Access the Web Interface

Open your browser and navigate to http://localhost:5705

⁠4. Scan Private Images (Optional)

To scan private images, set the following environment variables in a docker-compose.yml file:

version: '3'
services:
  cvst:
    image: aomran102/cvst:latest
    ports:
      - "5705:5705"
    environment:
      DOCKER_REGISTRY: "<your-registry>"
      DOCKER_USERNAME: "<your-username>"
      DOCKER_PASSWORD: "<your-password>"
    volumes:
      - "./reports:/cvst/reports"

Run the container with:

docker compose up -d

⁠📊 Reports

Reports are stored in the reports directory and can be downloaded as CSV or viewed as HTML directly from the web interface.

⁠🤝 Why Choose CVST?

CVST bridges the gap between Trivy's powerful scanning capabilities and user-friendly accessibility, making container security approachable for all skill levels. Its support for multi-image scanning, flexible reporting, and private registry integration makes it a versatile tool for securing containerized environments.

⁠📜 Resources

• Docker Hub: Pull the image from aomran102/cvst⁠.
• GitHub Repository: Explore the source code, documentation, and issue tracker at amromran102/cvst⁠.
• Support: Report issues or seek help via GitHub Issues.
• Trivy: Learn more about the underlying scanning engine at aquasec/trivy⁠.

Secure your containerized applications with confidence. Start scanning today!