Code
Container Image Scanning
Container Image Scanning inspects the contents of a container image. It looks for vulnerable operating-system packages and libraries bundled inside.
What it is
A container image packages an application together with the operating-system files and libraries it needs. Any of those components can carry a known vulnerability. This module examines the layers of an image and reports what it finds.
Key capabilities
- Scans container images.
- Detects vulnerable operating-system packages.
- Detects vulnerable libraries inside the image.
- Covers the components bundled into each layer.
- Reports findings so they can be addressed.
Who it’s for
It fits teams that build and ship applications as containers. It helps engineers know what risk an image carries before running it. It suits any project that uses container images.