Find Docker Image Vulnerability Using docker-scout

Halo, kalau kamu merasa tulisan saya ngebantu kamu, kamu bisa ucapkan terima kasih lewat saweria.

If you feel this website help you, you can donate at saweria.

How To

1. Your docker package comes with docker-scout, but it is an old version. To install the new version, you can use

   
   cd /tmp
   wget https://github.com/docker/scout-cli/releases/download/v1.2.2/docker-scout_1.2.2_linux_amd64.tar.gz
   sudo mv docker-scout /usr/bin/docker-scout
   

2. To use docker-scout, you should have a hub.docker.com account. After creating an “Access Token,” login using docker login -u username

3. To check vulnerabilities use /usr/bin/docker-scout cves yourprivateregistry.com/user/repo:tag

   

4. After completing the vulnerability check, docker-scout can give you recommendations for the best base image for your docker images, /usr/bin/docker-scout recommendations yourprivateregistry.com/user/repo:tag