Build pipelines that create and deploy containers should include container security scanning. Our teams particularly like , a vulnerability scanner for containers. We've tried and among other good tools in this field. Unlike Clair, Trivy doesn¡¯t only check containers but also dependencies in the codebase. Also, because Trivy ships as a stand-alone binary, it's easier to set up and run the scan locally. Other benefits of Trivy are that it's open-source software and that it supports distroless containers.
Build pipelines that create and deploy containers should include container security scanning. Our teams particularly like , a vulnerability scanner for containers, because it's easier to set up than other tools, thanks to it shipping as a stand-alone binary. Other benefits of Trivy are that it's open-source software and that it supports distroless containers.
