Source: thenewstack.io
Inspect Container Images with the docker scan Command
If you’re serious about https://thenewstack.io/container-security-a-troubling-tale-but-hope-on-the-horizon/, then you know it all begins at the beguine… And although you can generally trust verified images, it’s best to know, first-hand, that trust is warranted.
If you’re using a different platform, you’ll need to only adjust the installation steps for installing Docker.
Next, I tested an image that was created with numerous vulnerabilities (for this very purpose) with the command: docker scan infoslack/dvwa The docker scan command pulled down the test image, scanned it for vulnerabilities and came up with the mother load (1101 issues).
If you’re using a different platform, you’ll need to only adjust the installation steps for installing Docker.
Next, I tested an image that was created with numerous vulnerabilities (for this very purpose) with the command: docker scan infoslack/dvwa The docker scan command pulled down the test image, scanned it for vulnerabilities and came up with the mother load (1101 issues).
Related Articles
Community Partners
DevOps Careers