Conscan

All-in-one container scanner with AI integration

Open Source

Developer Tools

GitHub

Security

Hey everyone 👋 I’m the maker of Conscan — really excited to share this with you all today. As a DevOps engineer, I kept running into the same problem when working with container security: To properly scan an image, I had to chain multiple tools like vulnerability scanners, SBOM generators, secret detectors, and compliance checkers — all with different outputs, formats, and workflows. I was missing the html formatted report that is easily presentable to the manager. Most of the time, there was some security scanning results but no one to follow or the Security manager is not aware of the issues. And developer are reluctant to explore the root cause and the fixes of the critical issues. So I built Conscan, where I added the notification feature that can alert the manager if there are some level of vulnerabilities and developer can explore with AI from the report. 👉 The idea is simple: one command → complete container security visibility With Conscan, you can scan an image and get: - Vulnerabilities (OS + dependencies) - Exposed secrets - SBOM (Software Bill of Materials) - CIS benchmark compliance - Image storage efficiency insights All in a single unified report (CLI, JSON, or HTML). 🔧 What makes it different Instead of reinventing scanners, Conscan brings the best tools together into one consistent workflow — so you don’t have to stitch them manually. It’s designed to: - Simplify CI/CD pipelines - Reduce tool sprawl - Give clearer, consolidated insights - Alerts & AI-powered insights One thing I personally felt missing in most tools was what happens after the scan. So Conscan also supports: 📩 Email & Slack alerts for critical vulnerabilities 🤖 AI-powered explanations of findings 🧠 Risk analysis with suggested fixes and remediation steps The goal is not just to detect issues — but to help you understand and act on them faster. 🔐 Fully self-hosted - Conscan runs entirely in your environment: - No SaaS dependency - No data leaving your infrastructure 🙏 I’d love your feedback I’m especially interested in: - How you currently scan container images - What’s painful in your workflow - Whether alerts + AI insights would actually help your team If you try it out, I’d really appreciate your thoughts — good or bad. Thanks for checking it out 🙌