Inspect Container Images with the docker scan Command

2 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

If you’re serious about https://thenewstack.io/container-security-a-troubling-tale-but-hope-on-the-horizon/, then you know it all begins at the beguine… And although you can generally trust verified images, it’s best to know, first-hand, that trust is warranted.

If you’re using a different platform, you’ll need to only adjust the installation steps for installing Docker.

Next, I tested an image that was created with numerous vulnerabilities (for this very purpose) with the command: docker scan infoslack/dvwa The docker scan command pulled down the test image, scanned it for vulnerabilities and came up with the mother load (1101 issues).

DevOps Articles