Update documentation to run the scans locally

[bobeal]

Hi,

I'm trying to run the scans locally but currently facing a bunch of dead references and thus a bit blocked on this:

• In https://github.com/flopezag/fiware-security/tree/develop#configuration, it is mentioned a scan.py file but the pointed file does not exist and there is no such file in the source
• In https://github.com/flopezag/fiware-security/tree/develop#execution, it is then mentioned a container-scan.py (guess it is same as the scan.py above?) which also does not exist

[bobeal]

Hi,

Do you have any news on this?

[flopezag]

Thanks for the issue.

You are right, I need to modify a little bit the content of the README file. The final version that I am executing is based on a shell scripts container-scan.sh.j2.

Keep in mind that I create a instance in the FIWARE Lab and automatically deploy all the components using Ansible and after that I execute the corresponding script.

You can take this file and rename to container-scan.sh. Additionally, comment the lines 440-442 and 456-458. Besides, the lines 98, 142, and 190 are related to the communication with the Nexus instance to keep the historical status of the analysis, therefore comment it.

Let me know if you could execute it.

This is a workaround the final version of develop include a go program to execute the tests that will be the base scan procedure on the future and the project will be adapted accordingly to this new program.