Hands-On Security in DevOps

Docker security scanning

Docker technology is widely used for software deployment and cloud infrastructure. For Docker-specific security testing, the Docker Bench defines several security best practices and configurations for Docker containers deployment. The "CIS Docker Community Edition Benchmark" defines a security recommendation on the Docker host, daemon, container images, and container runtime. Generally speaking, there are three kinds of Docker security tools that do one of three different things:

• Scan for Docker security best practices based on CIS (Docker Bench, Actuary)
• Scan for known common vulnerabilities and exposures (CVEs) (Claire, Anchor Engine)
• Runtime threat analysis (Falco, Dagda)

Here are the open source security testing ...