Docker
Docker Container Security Scanning: Finding Vulnerabilities Before Production
Container security scanners (Trivy, Grype, Docker Scout) analyze Docker images for known CVEs in OS packages and application dependencies. This guide covers running scans locally, integrating into GitHub Actions, enforcing severity thresholds, and reducing attack surface by choosing minimal base images. Every Docker image is a bundle of OS packages