goKakashi v0.0.1 - Initial Release
We are excited to announce the first release of goKakashi, a tool designed to simplify vulnerability scanning for Docker images across multiple registries with integrated policy-based scanning and notifications.
Key Features:
Multi-Registry Support: Supports Docker Hub as of now. (AWS ECR, GCR, and more for future enhancements)
Automated Vulnerability Scanning: Uses Trivy to scan Docker images with customizable scan policies.
Notification Integration: Automatically create tickets in Linear for detected vulnerabilities based on scan severity. It creates unique linear issue and avoid de-duplication on executing frequently.
Report Hosting: Serve public and private reports via web servers.
How to Use:
Set up your configuration using YAML or .env.
Define scan policies for Docker images and registries.
Scan and generate reports, with notifications sent automatically to issue tracking tools.