Painless Docker - 2nd Edition

Harbor Security Scan & SBOM

Harbor has two interesting features that enhance the security of your container images:

• Vulnerability Scanning: Harbor integrates with Trivy to provide vulnerability scanning of container images on demand. This helps identify known vulnerabilities in the software packages included in the images.

• Software Bill of Materials (SBOM): Harbor can generate SBOMs for container images, providing a detailed inventory of the components and dependencies included in the images. This is useful for compliance and security auditing.

ℹ️ An SBOM is a formal record containing the details and supply chain relationships of various components used in building software.
It provides transparency into the software's composition.