# Docker image scanning

**URL:** <https://community.sonatype.com/t/docker-image-scanning/2538>\
**Category:** Sonatype Nexus Repository\
**Tags:** docker\
**Created:** [September 20, 2019, 2:23pm UTC](https://community.sonatype.com/t/docker-image-scanning/2538 "2019-09-20T14:23:33Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![dbevacqua](https://avatars.discourse-cdn.com/v4/letter/d/839c29/32.png) [@dbevacqua](https://community.sonatype.com/u/dbevacqua)\
**Post date:** [September 20, 2019, 2:23pm UTC](https://community.sonatype.com/t/docker-image-scanning/2538/1 "2019-09-20T14:23:33Z")

</div>

Hi

I’m looking into adding support to Nexus for image scanning with e.g. Clair, but it looks like `nexus-repository-docker` is closed source.

According to the pom.xml in v3.18., its parent is `nexuspro-plugins`, so this sound about right. Are there plans to open source this module?

Alternatively, is there anything I can hook into to be notified when a new image is pulled?

Thanks

---

<div class="post-metadata">

**Author:** ![mpiggott](https://avatars.discourse-cdn.com/v4/letter/m/f0a364/32.png) [@mpiggott](https://community.sonatype.com/u/mpiggott)\
**Post date:** [September 23, 2019, 3:33pm UTC](https://community.sonatype.com/t/docker-image-scanning/2538/2 "2019-09-23T15:33:04Z")

</div>

I believe you should be able to use the AssetCreatedEvent (or the updated version) to listen for events - [nexus-public/AssetCreatedEvent.java at master · sonatype/nexus-public · GitHub](https://github.com/sonatype/nexus-public/blob/master/components/nexus-repository/src/main/java/org/sonatype/nexus/repository/storage/AssetCreatedEvent.java)

---

<div class="post-metadata">

**Author:** ![dbevacqua](https://avatars.discourse-cdn.com/v4/letter/d/839c29/32.png) [@dbevacqua](https://community.sonatype.com/u/dbevacqua)\
**Post date:** [September 23, 2019, 4:06pm UTC](https://community.sonatype.com/t/docker-image-scanning/2538/3 "2019-09-23T16:06:35Z")

</div>

Fantastic - thanks for the quick reply. I’ll give that a go.

---

<div class="post-metadata">

**Author:** ![jtom](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/jtom/32/68_2.png) [@jtom](https://community.sonatype.com/u/jtom)\
**Post date:** [September 23, 2019, 4:23pm UTC](https://community.sonatype.com/t/docker-image-scanning/2538/4 "2019-09-23T16:23:10Z")

</div>

Last I heard we plan to open source all our formats. It’s just prioritizing against all the new features and bugs.  
I think the ticket we have is internal, but I’ll denote your interest on it.  
-Joe