xTag

Overview

Full name
docker.io/owasp/dependency-check
Registry
docker.io
Namespace
owasp
Repository
dependency-check
Cached tags
115
Last synced
07/06/2026, 12:37 PM

Introduction

OWASP Dependency-Check 软件成分分析 CLI 镜像，扫描 Maven/NPM 等项目依赖 CVE，面向 CI 流水线一次性任务而非常驻服务。

Details

owasp/dependency-check 运行 Java CLI，解析项目 lockfile 与 jar 并与 NVD 漏洞库比对生成 HTML/JSON/SARIF 报告。典型集成于 Jenkins/GitLab CI 在构建阶段阻断高危依赖。镜像定位为 --rm 扫描 Job，非 Web 或数据库服务；数据目录需挂载 NVD 缓存加速重复扫描，K8s 场景使用 CronJob 或 Pipeline Job 而非 Deployment。

快速启动

docker run --rm \
  -v $(pwd):/src \
  -v $(pwd)/odc-data:/usr/share/dependency-check/data \
  docker.io/owasp/dependency-check:latest \
  --scan /src --format HTML

推荐实践

docker run --rm \
  -v $(pwd):/src:ro \
  -v /data/odc-cache:/usr/share/dependency-check/data \
  -v /data/odc-reports:/report \
  docker.io/owasp/dependency-check:10.0.4 \
  --scan /src --format ALL --out /report --nvdApiKey YOUR_NVD_KEY

核心参数说明

  • -v ...:/src — 待扫描项目源码（只读）
  • -v .../data:... — NVD 漏洞库缓存
  • -v .../report:... — 报告输出目录
  • --nvdApiKey — NVD API 密钥（加速更新）
  • 定位 — CI 一次性扫描任务
  • 固定 tag — CVE 规则库版本 pin

Latest tags (20)

View all 115 tags →
TagArchPushed AtSizeDigestSyncWishAction
docker.io/owasp/dependency-check
:latest
linux/amd64linux/arm64
2026/05/03 19:18251.2 MBsha256:84cd5c929a59…
docker.io/owasp/dependency-check
:12.2.2
linux/amd64linux/arm64
2026/05/03 19:18251.2 MBsha256:84cd5c929a59…
docker.io/owasp/dependency-check
:12.2.1
linux/amd64linux/arm64
2026/04/12 00:33258.7 MBsha256:e8e40735ec31…
docker.io/owasp/dependency-check
:12.2.0
linux/amd64linux/arm64
2026/01/09 21:54265.5 MBsha256:009460dc7dba…
docker.io/owasp/dependency-check
:12.1.9
linux/amd64linux/arm64
2025/11/11 22:01265.6 MBsha256:eeb357f5f72c…
docker.io/owasp/dependency-check
:12.1.8
linux/amd64linux/arm64
2025/10/13 23:19265.3 MBsha256:f213d2be6c60…
docker.io/owasp/dependency-check
:12.1.7
linux/amd64linux/arm64
2025/10/12 22:15265.3 MBsha256:d6c4792e7074…
docker.io/owasp/dependency-check
:12.1.6
linux/amd64
2025/09/24 20:42266.7 MBsha256:37e3c1156f00…
docker.io/owasp/dependency-check
:12.1.5
linux/amd64
2025/09/20 21:22266.8 MBsha256:7413f32c641e…
docker.io/owasp/dependency-check
:12.1.3
linux/amd64
2025/06/10 19:57276.4 MBsha256:cfb5c429533f…
docker.io/owasp/dependency-check
:12.1.2
linux/amd64
2025/06/07 19:16276.4 MBsha256:b5a5cb47d29d…
docker.io/owasp/dependency-check
:12.1.1
linux/amd64
2025/04/05 19:59275.9 MBsha256:44462ad8135a…
docker.io/owasp/dependency-check
:12.1.0
linux/amd64
2025/02/16 23:57275.5 MBsha256:60ee7af9cf80…
docker.io/owasp/dependency-check
:12.0.2
linux/amd64
2025/01/30 20:57269.8 MBsha256:a7f98261bf8f…
docker.io/owasp/dependency-check
:12.0.1
linux/amd64
2025/01/19 21:52269.8 MBsha256:f4e282f6e2f7…
docker.io/owasp/dependency-check
:12.0.0
linux/amd64
2025/01/11 23:44270.7 MBsha256:41d92cabd165…
docker.io/owasp/dependency-check
:11.1.1
linux/amd64
2024/12/04 19:13271.4 MBsha256:9d0d77659c0c…
docker.io/owasp/dependency-check
:11.1.0
linux/amd64
2024/10/30 18:14271.3 MBsha256:f42d0aba7209…
docker.io/owasp/dependency-check
:11.0.0
linux/amd64
2024/10/21 19:10271.3 MBsha256:aea487b47bcc…
docker.io/owasp/dependency-check
:10.0.4
linux/amd64
2024/09/01 20:16264.6 MBsha256:893c545536f2…