/usr/local/bin/scanner

usage: scan [OPTIONS]
  -a string
    	Advertise address
  -adv_port uint
    	Advertise port
  -base_image string
    	Base image
  -cap_critical
    	support critical level severity
  -d string
    	cve database file directory (default "./dbgen/")
  -debug string
    	debug filters. (v=CVE-2024-0001,f=jar)
  -enable-tls-verification
    	enable tls verification
  -image string
    	Scan image (Docker/OCI ref: [registry/][namespace/]name[:tag] or name@sha256:...)
  -j string
    	Controller join address
  -join_port uint
    	Controller join port
  -license string
    	Scanner license
  -maxrec int
    	maximum record cacher size in MB
  -no_task
    	Not using scanner task
  -no_wait
    	No initial wait
  -o string
    	Output CVEDB in json format, specify the output file
  -pid int
    	Scan host or container
  -proxy_url string
    	A URL to the proxy to use during on demand scanning
  -registry string
    	Scan image registry
  -repository string
    	Scan image repository
  -scan_layers
    	Scan image layers
  -show string
    	Standalone Mode: Stdout print options, cmd,module
  -tag string
    	Scan image tag (or digest like sha256:...) (default "latest")
  -u string
    	Container socket URL (default "unix:///var/run/docker.sock")
  -v	show cve database version
  -x	more debug