$ docker scan -file Dockerfile docker-scan:e2e

For example, run the following command to scan the hello-world image: The docker scan command allows you to scan existing Docker images using the image name or ID. For information about automatically scanning Docker images through Docker Hub, see Hub Vulnerability Scanning. This page contains information about the docker scan CLI command. The scan results contain a list of Common Vulnerabilities and Exposures (CVEs), the sources, such as OS packages and libraries, versions in which they were introduced, and a recommended fixed version (if available) to remediate the CVEs discovered.įor information about the system requirements to run vulnerability scanning, see Prerequisites. Users trigger vulnerability scans through the CLI, and use the CLI to view the scan results. Docker Scan runs on Snyk engine, providing users with visibility into the security posture of their local Dockerfiles and local images. Vulnerability scanning for Docker local images allows developers and development teams to review the security state of the container images and take actions to fix issues identified during the scan, resulting in more secure deployments. Check out How to scan images for details.

Looking to speed up your development cycles? Quickly detect and learn how to remediate CVEs in your images by running docker scan IMAGE_NAME.

Sign in to Docker to start scanning your images for vulnerabilities. You can now get 10 free scans per month as part of your Docker subscription. This feature requires a Docker subscription

Scan virus dengan cmd