oscap-podman(8)

✨ oscap-podman — it's giving offline SCAP realness ✨

okay bestie, welcome to the oscap-podman(8) page, straight out of the System Administration Utilities collection 💖 this is the little glow-up script that lets you do SCAP stuff on Podman things without ever booting them up. no cap.

🌸 NAME 🌸

oscap-podman — the tool for offline SCAP evaluation of Podman container images and Podman containers. she does the scanning while nobody's looking 🔍✨

🦋 DESCRIPTION 🦋

so like, oscap-podman runs the oscap tool on a given container image or container. that's it. that's the whole vibe. 💅

⚠️ heads up bestie: this script cannot run in rootless mode. fr fr. don't try it. it's not gonna work and you're gonna be sad 😭

🎀 USAGE 🎀

the way this tool works is it mimics the usage and options of the oscap(8) tool. so if you already know oscap, you already know her. iconic behavior honestly 👑

🍓 Compliance scan of Podman container image:

oscap-podman [--oscap=<OSCAP_BINARY>] IMAGE_NAME OSCAP_ARGUMENT
[OSCAP_ARGUMENT...]

🌈 Compliance scan of Podman container:

oscap-podman [--oscap=<OSCAP_BINARY>] CONTAINER_NAME OSCAP_ARGUMENT
[OSCAP_ARGUMENT...]

and for the deets on what you can actually put in OSCAP_ARGUMENT? go read oscap(8), bestie. she's got the whole menu 🫶

🙈 REPORTING BUGS 🙈

found a bug? please don't suffer in silence 😭 report it right here:

https://github.com/OpenSCAP/openscap/issues

not me personally reading every issue… 👀 jk. but seriously, report them.

👑 AUTHORS 👑

Jan Černý <jcerny@redhat.com> — the main character who wrote this 💜

okay that's the whole page bestie, mwah 💋 this lil masterpiece comes to you from Red Hat, Inc. and it's been living its truth since June 2019. stay slay, scan responsibly, and remember: offline evaluation is self-care 🌸✨🦋