# eliasgranderubio/dagda

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities

Repository: https://github.com/eliasgranderubio/dagda
Canonical: https://ross.abutalabs.com/products/dagda
Language: Python
License: Apache-2.0
License Family: permissive
Topics: docker, security, static-analysis, vulnerabilities, detecting-anomalous-activities, malware-detection
Last push: 2023-05-23T02:03:43+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3578, "days_push": 1199, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1248, forks 177 (observed 2026-08-28T04:04:07.822134+00:00)

## What it is
Dagda is a Python-based security tool that performs static analysis of known vulnerabilities, trojans, viruses, and malware in Docker images and containers. It also monitors the Docker daemon and running containers for anomalous activities, storing analysis history in MongoDB.

## Use cases
- scan docker images for known CVE vulnerabilities
- detect malware and trojans in containers
- monitor running docker containers for anomalous activity
- audit OS packages and language dependencies in images
- track security analysis history of docker images
- integrate antivirus scanning into container pipelines

## When to choose
- you need combined vulnerability and malware scanning for Docker images
- you want runtime monitoring of container behavior with Falco integration
- you need historical security reports stored per image/container

## When to avoid
- you need a actively developed tool with frequent updates
- you scan non-Docker artifacts or non-Linux base images
- you want a SaaS or managed scanning solution

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, vulnerability-scanning, monitoring, static-site-generator
- domain: security, developer-tools
- platform: python, cli
- tags: docker-security, container-scanning, malware-detection, clamav, falco, runtime-monitoring, cve, containers, devops, linux, docker

## Member repositories
- eliasgranderubio/dagda (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:07.822134+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:07:52.185953+00:00, confidence not recorded.
  - readme: https://github.com/eliasgranderubio/dagda (fetched 2026-08-28T04:04:07.822134+00:00, sha a8dff80a2d40)
- Data as of 2026-08-30T08:39:29.467469+00:00.