Re:OpenSCAP: Tools for managing system security and standard...
by oso2k on Sunday February 25, 2018 @06:33PM
(#16461869)
Like another poster here, I work for Red Hat and we sometimes implement OpenSCAP as part of OpenShift (our Kubernetes distro) to do regular CVE scanning of container images. My colleague Andy Block has a repo to demonstrate this capability.
https://github.com/sabre1041/image-scanning-signing-service