Overview

You can scan Docker containers by running the Unified Agent in Docker mode using the docker.scanImages parameter. 

...

Alternatively, you can leave both the docker.includes and docker.excludes parameters commented out if you want to scan all your image containers. 

The scanner saves your required images and scans all the file systems and installed packages.
It scans all the image layers, and handles archive handles archive files in the layers based on the value in the property 'archiveExtractionDepth'.

The Docker image is saved to the temporary directory defined in your environment and is deleted immediately after the scan.

The scanning results are displayed in a new WhiteSource project. The dockerThe docker.projectNameFormat parameter projectNameFormat parameter determines the format: 

• If the value is set to default, the project name created in WhiteSource comprises the Docker repository name, tag and ID, in the following format:

<Image Name> <Image Tag> <Image ID>

• If the value is set to repositoryNameAndTag, then the project name created in WhiteSource comprises the Docker repository name and tag, in the following format:

<Image Name> <Image Tag>

• If the value is set to repositoryNameto repositoryName,  the project name comprises only the Docker repository name:

<Image Name>