Docker Scout and Vulnerability Scanning
Explore the role of Docker Scout in vulnerability scanning within container images. Understand how software bill of materials and vulnerability reports help identify risks and guide fixes. Learn how to configure scanning policies and integrate with Docker registries to enhance container security management.
We'll cover the following...
Every container runs multiple software packages that are susceptible to bugs and vulnerabilities that malicious actors can exploit.
Image scanners
Image scanning analyzes your images and produces a detailed list of all the software packages it uses. We call this list a software bill of materials (SBOM), and the image scanning system compares the SBOM against databases of known vulnerabilities and provides a report of vulnerabilities in your software. Most vulnerability scanners will rank the vulnerabilities and provide advice on fixes.
Vulnerability scanning is now an integral part ...