Paper Info
Title
ConPan: a tool to analyze packages in software containers
Abstract
Deploying software packages and services into containers is a popular software engineering practice that increases portability and reusability. Docker, the most popular containerization technology, helps DevOps practitioners in their daily activities. Despite being successfully and increasingly employed, containers may include buggy and vulnerable packages that put at risk the environments in which the containers have been deployed. Existing quality and security monitoring tools provide only limited support to analyze Docker containers, thus forcing practitioners to perform additional manual work or develop adhoc scripts when the analysis goes beyond security purposes. This limitation also affects researchers desiring to empirically study the evolution dynamics of Docker containers and their contained packages. To overcome this limitation, we present ConPan, an automated tool to inspect the characteristics of packages in Docker containers, such as their outdatedness and other possible flaws (e.g., bugs and security vulnerabilities). ConPan comes with a CLI and API, and the analysis results can be presented to the user in a variety of formats.
Year
DOI
Venue
2019
10.1109/MSR.2019.00089
Proceedings of the 16th International Conference on Mining Software Repositories
Keywords
Field
DocType
bugs, containers, docker, outdated software, vulnerabilities
Containerization,Software engineering,Computer science,Security monitoring,Software,DevOps,Software portability,Reusability,Database,Scripting language,Vulnerability
Conference
ISSN
ISBN
Citations 
2574-3848
978-1-7281-3370-6
0
PageRank 
References 
Authors
0.34
7
5
Name
Order
Citations
PageRank
Ahmed Zerouali132.47
Valerio Cosentino29511.87
Gregorio Robles3129491.67
Jesús M. González-barahona446235.96
Tom Mens53018181.32