Skip to content
SPECIFICTION
Get listed

Dagda

github.com

LinuxAPISelf-hosted
Visit github.com
Spec score 7.3 #14 of 29 in Container Image Scanning Tools

Spec sheet

Purpose
Dagda performs static analysis of Docker images and containers for known vulnerabilities and malicious threats, and monitors running containers for anomalous activities.Read 9 Oct 2026 · github.com
Deployment
The README describes running Dagda as a server and provides a Docker Compose setup with MongoDB and a Dagda container.Read 9 Oct 2026 · github.com
Support
The README directs users to GitHub Issues or the author's Twitter account for bugs, questions, and discussions.Read 9 Oct 2026 · github.com
License
The GitHub repository identifies its license as Apache-2.0.Read 9 Oct 2026 · github.com
Base images
The README lists Red Hat/CentOS/Fedora, Debian/Ubuntu, OpenSUSE, and Alpine as supported Linux base images.Read 4 Oct 2026 · github.com
Dependency coverage
The README lists Java, Python, Node.js, JavaScript, Ruby, and PHP dependencies for analysis using OWASP Dependency-Check and Retire.js.Read 9 Oct 2026 · github.com
Deployment requirements
The listed requirements include Python 3.8 or later, MongoDB 3.6 or later, Docker, and host OS kernel headers for Falco monitoring.Read 4 Oct 2026 · github.com
Docker deployment
The README describes a Docker Compose setup with MongoDB and Dagda containers and a shared Docker socket.Read 4 Oct 2026 · github.com
Interfaces
Dagda can be used through its CLI and has a REST API.Read 9 Oct 2026 · github.com
Malware detection
It uses ClamAV to detect trojans, viruses, malware, and other malicious threats in Docker images and containers.Read 4 Oct 2026 · github.com
Malware scanning
Dagda uses ClamAV to detect trojans, viruses, malware, and other malicious threats in Docker images and containers.Read 9 Oct 2026 · github.com
Report history
Analysis reports, including static analysis and runtime monitoring, are stored in MongoDB for later review.Read 9 Oct 2026 · github.com
Reports
Analysis reports, including static analysis and runtime monitoring, are stored in MongoDB so image and container history can be reviewed.Read 4 Oct 2026 · github.com
Requirements
The README requires Python 3.8 or later, MongoDB 3.6 or later, Docker, and pip3.Read 9 Oct 2026 · github.com
REST API
The README says Dagda has a REST API in addition to its command-line interface.Read 4 Oct 2026 · github.com
Runtime monitoring
Dagda integrates with Falco to monitor running Docker containers and gathers real-time events from the Docker daemon.Read 9 Oct 2026 · github.com
Runtime prerequisite
The README says host OS kernel headers are required for Falco-based monitoring and notes that Sysdig installation may be needed on some distributions.Read 9 Oct 2026 · github.com
Supported image bases
The README lists Red Hat/CentOS/Fedora, Debian/Ubuntu, OpenSUSE, and Alpine as supported Linux base images.Read 9 Oct 2026 · github.com
Vulnerability analysis
It checks installed OS packages and programming-language dependencies against vulnerability and exploit data stored in MongoDB.Read 9 Oct 2026 · github.com

Where Specifiction places it

Alternatives to DagdaAll alternatives →