Container images can contain known vulnerabilities.
What Scanners Check
- OS package vulnerabilities
- Application dependencies
- Malware signatures
- Secrets and credentials
- Configuration issuesScanning Integration
- CI/CD pipeline scanning
- Registry scanning
- Runtime scanning
- Admission controlTools
- Trivy
- Grype
- Clair
- Snyk Container
- Prisma CloudBlock deployments with critical vulnerabilities.