A minimal Docker image could still contain software with known vulnerabilities. Docker images use a standard, open format, which means that tools can be reliably built to navigate and inspect image layers. One tool is Docker Security Scanning, which examines the software inside Docker images for vulnerabilities.
Docker Security Scanning looks at all the binary files in the image, in your application dependencies, the application framework, and even the operating system. Every binary is checked against multiple Common Vulnerability and Exploit (CVE) databases, looking for known vulnerabilities. If any issues are found, Docker reports the details.
Docker Security Scanning is available on Docker Hub for official repositories ...
