Security Automation with Ansible 2

Automating vulnerability assessments of Docker containers using Ansible

Containers are everywhere. Let's look at some of the techniques and tools to perform scans and assess the Docker containers and environments using Ansible.

There are many different ways of evaluating the security of containers. In this chapter, we will look at some of them and how they can be used with Ansible:

Tool	Description
Docker Bench	A security shell script to perform checks based on CIS
Clair	A tool to perform vulnerability analysis based on the CVE database
Anchore	A tool to perform security evaluation and make runtime policy decisions
vuls	An agent-less vulnerability scanner with CVE, OVAL database
osquery	OS instrumentation framework ...