4 ms·
You can use tools like Snyk to scan images for vulnerabilities (even the Docker(tm) cli tool has one now), you can do things like failing your CI pipeline if th
by slekker 3y ago
You can use tools like Snyk to scan images for vulnerabilities (even the Docker(tm) cli tool has one now), you can do things like failing your CI pipeline if there are critica vulnerabilities.
You can also use Dependabot (and others) to update your images on a cronjob-like schedule.
This is a solved problem
- SkiFire13 3y agoThis is a solution for the app developer, not for the users that might have to deal with older and unsupported apps.
- Yasuraka 3y agoI highly advise going with Trivy over Snyk or, as it's still in beta at the moment, Docker Scout.
- slekker 3y agoHadn't heard of Trivy, but glad to see another great product from AquaSec :^)