Re:Docker Image Vulnerability Research
by beevek on Tuesday March 14, 2017 @12:53PM
(#13869201)
Is there a way for teams with production Docker deployments to easily experiment with this kind of scanning on their own infra to understand their own situation? Maybe worth writing up a quick description of how operators can do something like that.
[ Parent
| on HN ]
Absolutely. Docker and Quay.io both offer scanning for repositories they host, there are open source options like vuls and clair that are a bit more work to set up, and we have a free plan for up to 5 hosts and for open source projects and schools.
Happy to help if you need a hand.