Dagda

Aggregates CVE, Bugtraq, Red Hat advisories, and exploits from Offensive Security into a MongoDB database, providing a wide net for static analysis as detailed in the database contents section.

Uses OWASP Dependency Check and Retire.js to scan dependencies in Java, Python, Node.js, JavaScript, Ruby, and PHP, covering diverse application stacks within containers.

Leverages Falco for real-time detection of anomalous activities in running containers, with example outputs showing warnings for unexpected setuid calls, enhancing runtime security.

Incorporates ClamAV antivirus engine to identify trojans, viruses, and malware in Docker images, as demonstrated in static analysis results with specific malware binaries listed.

Stores all analysis reports in MongoDB, allowing searchable history of Docker images and containers, which aids in auditing and compliance efforts.