ISO images are named for the fact that they nearly always contain one of a pair of international file system standards published by ISO: ISO 9660 and ISO/IEC 13346, a.k.a. As will be shown below, Linux, Mac OS X, and recent versions of Windows can be used to mount the image’s file system, which can then be scanned by Dependency-Check.
Tools must be used that can interpret the contained file system. (See File Type Analyzers for a list of what types of artifacts Dependency-Check is capable of scanning.) These disk image files are not a standard archive format, however. Dependency-Check can be used as one of your tools for vetting software distributed via an ISO image.
