Can CDXGEN be taken offline

[turenwei]

The author wants to ask whether cdxgen can leave the Internet and scan offline. I have seen its principle. It seems that it compiles by driving commands in various languages, and then obtains component information. If the network is disconnected, whether cdxgen can work normally, and what the effect is. If you want to change the source code, how difficult is it

[prabhu]

Have you tried running the container images with --network=none?

[turenwei]

Not just containers, but all types

[aryan-rajoria]

When using cdxgen container to scan a project with network none, all project scans happen without internet.
--network none isolated the container.

[prabhu]

Search and ChatGPT points to articles like these with more options - https://www.baeldung.com/linux/block-access-process-network

[turenwei]

For example, when scanning the source code of a Java project, MVN will pull the jar package from the repository. If there is no network, it will fail to build, resulting in the inability to obtain component information. Therefore, the essence of CDXGEN still depends on the network or building a proxy server