How to Scan a Docker Container

You have to scan your images, because these dependency scanners don't include the os dependencies. I don't know yet of a docker file dependency up dater. That would actually be pretty cool if we had a doc dependabot like scanner that would see that you have apt or yumdependencies in there and see if they're out of date. And for that, you could use tools like trivy so over at aqua security. This is a c v e scanner that you can scan your code,. You can actualy have it scann an image in a registry, so you can upload it, scan the registry. Or when you're building, which is what i prefer to

Transcript

Play full episode

Transcript

Episode notes

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app