ANCHORE,(1)

NAME
anchore, - manual page for anchore, version 0.9.0

SYNOPSIS
anchore analyze [OPTIONS]

DESCRIPTION

    Run the analyzer to scan and summarize a container image and store that analysis in the local host's anchore image db for further use in gating, reports, and queries.

    Upon completion of analysis of an image there will be an entry in the db named with the imageid (a directory in $anchore/data/, where $anchore = $HOME/.anchore (default) or /etc/anchore depending on installation). If the analyzer detects that an image has already been analyzed it will skip analysis. This behavior can be overridden with the '--force' flag.

    To get the full power of analysis and subsequent gate and query tools it is recommended to include the dockerfile as often as possible. When using --dockerfile, you must use --image and specify a single image. This allows anchore to associate that specific dockerfile with the image in the analysis output. Anchore will always try to infer a dockerfile, but certain constructs and operations in dockerfiles become opaque after the image is built (e.g. COPY operations, or RUN operations that invoke a tool that loads data on the image), so including the actual dockerfile results in the best analysis output and makes more information available for gate evaluation and later queries.

    Image IDs can be specified as hash ids, repo names (e.g. centos), or tags (e.g. centos:latest).

    Image Types: ["none"|"base"] Specify the type of the image being analyzed. Use 'base' to tell anchore that the given image is a base image to be used to build other images. Use 'none' to not assign a specific image type to the image.

    Examples:

    Analyze all images listed in a file that contains lines of the form '<image ID> <path/to/dockerfile>' on the local host:

    'anchore analyze --imagefile myimages.txt'

    Analyze a newly built image with it's corresponding dockerfile:

    'anchore analyze --image myapp:latest --dockerfile myapp.dockerfile'

    Analyze all image on the local host except a list (perhaps local tools used in the build process, etc):

    'anchore analyze --excludefile exclusions.txt'

OPTIONS

--force
    Force analysis even if existing analysis is found in db.

--image <imageid>
    Process specified image ID

--imagefile <file>
    Process image IDs listed in specified file.

--include-allanchore
    Include all images known by anchore, as found in host-local db

--dockerfile <file>
    Dockerfile of the image to analyze.

--imagetype <typetext>
    Specify the type of image that is being analyzed (use "none" if unknown).

--skipgates
    Do not run gates as part of analysis.

--excludefile <file>
    Name of file containing images to exclude during analysis. Each line is an image name/id

--extended-help
    Show extended help content, similar to manpage, and exit.

--help
    Show this message and exit.