As most of our applications are using Docker I think it would be benefitial to have some kind of linting/scanning tool for Dockerfiles or Docker images to spot common mistakes that can lead to real security vulnerabilities.
Candidates would be:
- dockle – scans built Docker images for vulnerabilities
- hadolint – scans Dockerfiles for vulnerabilities
- trivy – multi-purpose tool where scanning Docker images is only one of many capabilities
As most of our applications are using Docker I think it would be benefitial to have some kind of linting/scanning tool for Dockerfiles or Docker images to spot common mistakes that can lead to real security vulnerabilities.
Candidates would be: