Docker Scan Images for Known Vulnerabilities

2021-07-08 145 words One minute

Contents

CVE(Common Vulnerabilities and Exposures)

CVE

The Common Vulnerabilities and Exposures system provides a reference-method for publicly known information-security vulnerabilities and exposures.

A Simple and Comprehensive Vulnerability Scanner for Containers and other Artifacts, Suitable for CI.
This is one of a tool for CVE scanner.

Trivy

Go to official Installation

1
trivy image nginx:1.18.0

1
trivy image --severity CRITICAL nginx:1.18.0

1
trivy image --severity CRITICAL,HIGH nginx:1.18.0

1
trivy image --ignore-unfixed nginx:1.18.0

1
2
3
docker save nginx:1.18.0 > nginx.tar

trivy image --input nginx.tar