Find Docker Image Vulnerability Using docker-scout

Halo, kalau kamu merasa tulisan saya ngebantu kamu, kamu bisa ucapkan terima kasih lewat saweria .

If you feel this website help you, you can donate at saweria .

How To

1. Your docker package comes with docker-scout, but it is an old version. To install the new version, you can use

   
   cd /tmp
   wget https://github.com/docker/scout-cli/releases/download/v1.2.2/docker-scout_1.2.2_linux_amd64.tar.gz
   sudo mv docker-scout /usr/bin/docker-scout
   

2. To use docker-scout, you should have a hub.docker.com account. After creating an “Access Token,” login using docker login -u username

3. To check vulnerabilities use /usr/bin/docker-scout cves yourprivateregistry.com/user/repo:tag

   

4. After completing the vulnerability check, docker-scout can give you recommendations for the best base image for your docker images, /usr/bin/docker-scout recommendations yourprivateregistry.com/user/repo:tag