3 ms·
Was looking into this yesterday as I have a bunch of containers running on my media server. Found this tool: https://github.com/aquasecurity/trivy https://githu
by sprt 6y ago
Was looking into this yesterday as I have a bunch of containers running on my media server. Found this tool: https://github.com/aquasecurity/trivy https://github.com/aquasecurity/trivy which allows you to easily scan your images for vulns. Anyone have other recs?
- Iolaum 6y agoLooks like a very good tool! Shame it doesn't support Fedora. I all be definitely checking it out.
- loganmarchione 6y agoThere is also Clair. https://github.com/quay/clair https://github.com/quay/clair
- thinkmassive 6y agoAnchore provides Grype https://github.com/anchore/grype https://github.com/anchore/grype
- sprt 6y agoNice. I like the (shortest) output of this one better. And as opposed to trivy, it was able to detect the packages (and 1 vuln) in ghcr.io/linuxserver/swag.