cgrater

Are you essentially reverse-engineering popular images like mysql/mysql? Are you not running vendor products that might reference public images?

Thanks, that's a really useful tool and a good write-up on the utility of it.

In the short term I can probably convince the higher-ups that if I download the images manually and do some level of investigation using a tool like yours then it should account for some security.

Have you considered container scanning tools?