Painless Docker - 2nd Edition

Scan your Images for Vulnerabilities and Misconfigurations

Scanning images is a good practice to detect security problems, vulnerabilities, and best-practice violations. There are many tools that can help you scan your images. Some of them are:

• Clair: An open-source project for static analysis of vulnerabilities in application containers.

• Trivy: A tool by Aqua to find vulnerabilities and IaC misconfigurations, SBOM discovery, Cloud scanning, Kubernetes security risks, and more. Trivy is natively integrated into Harbor.

• Docker Bench for Security