Rootfs

Rootfs scanning is for special use cases such as

• Host machine
• Root filesystem
• Unpacked filesystem

$ tunnel rootfs /path/to/rootfs

Note

Rootfs scanning works differently from the Filesystem scanning. You should use tunnel fs to scan your local projects in CI/CD. See here for the differences.

Performance Optimization

By default, Tunnel traverses all files from the specified root directory to find target files for scanning. However, when you only need to scan specific files with absolute paths, you can avoid this traversal, which makes scanning faster. For example, when scanning only OS packages, no full traversal is performed:

$ tunnel rootfs --pkg-types os --scanners vuln /

When scanning language-specific packages or secrets, traversal is necessary because the location of these files is unknown. If you want to exclude specific directories from scanning for better performance, you can use the --skip-dirs option.