Container Image Security Scanning

Container images can contain known vulnerabilities.

What Scanners Check

- OS package vulnerabilities
- Application dependencies
- Malware signatures
- Secrets and credentials
- Configuration issues

Scanning Integration

- CI/CD pipeline scanning
- Registry scanning
- Runtime scanning
- Admission control

Tools

- Trivy
- Grype
- Clair
- Snyk Container
- Prisma Cloud

Block deployments with critical vulnerabilities.