cdxgen VS kitematic

Today, it gives me great pleasure to announce OWASP dep-scan v5. Like everyone, I was constantly frustrated with the amount of false positives generated by all Software Composition Analysis tools (including mine) and wanted to do something. I worked closely with a few colleagues (Caroline, Tim, Saket, and David) for a year to build the various capabilities that together form depscan v5.

Check out CycloneDX and cdxgen. It creates a software bill of materials, similar to a package-lock.json, that hashes all your dependencies so that if there's any drift you can easily detect tampering.

Yeah, You need Hyper-V to run basic Docker configuration on Windows, I just simplified this too much I guess.

The end result is that if you run Docker on Windows with Hyper-V alone it's using Window filesystem and then "translating" this for Docker therefore making the whole process of accessing the files incredibly slow.

I used to work with docker using Docker Kinematic (https://github.com/docker/kitematic) in the past, which basically was a Virtual box with Docker installed inside this VM, and since the VM was some kind of Linux, it worked reasonably well.

The same seems to be the case when using WSL2 - you run VM and Docker inside this VM, removing the file sync/translation part out of the equation, resulting in speed boots.

Auttomatic Open Source Docker Open source Those are two i can think of that use those technologies, read the “contribution” part on github. If you search “open source projects” and the technologies you know, you’ll find even more. :)

Kitematic runs on Linux: https://github.com/docker/kitematic/releases, and so does Dockstation: https://dockstation.io