News for hackers. Stuff that matters.
Re:Log4jscanner by psYchotic on Sunday January 02, 2022 @09:48AM (#29769110)
May I suggest you look into grype[0], or some other similar tool? It can be used to scan images for vulnerabilities. You'll probably find a bunch of vulnerabilities that aren't likely to actually affect you, but still, at least you'll know they're in the images you're running. And maybe you'll start using things like docker-slim[1] on your own images to get rid of those vulnerabilities you do find.

[0]: https://github.com/anchore/grype

[1]: https://github.com/docker-slim/docker-slim

There are no comments on this comment yet.