Project

Profile

Help

Story #6871

Updated by pulpbot over 2 years ago

 

 **Ticket moved to GitHub**: "pulp/pulp_container/463":https://github.com/pulp/pulp_container/issues/463 




 ---- 


 ## Goal 

 Users storing content in pulp_container should derive benefit from security scanning of docker containers that are out there. 

 ## Existing Tools 

 The idea is to integrate a tool not make a new one. Here are some options I've read about from [this article](https://pythonspeed.com/articles/docker-python-security-scan/). 

 * [trivy](https://github.com/aquasecurity/trivy) is claimed as the easiest 
 * [Anchore Engine](https://github.com/anchore/anchore-engine) 
 * [Claire](https://github.com/quay/clair) + [Klar,](https://github.com/optiopay/klar) 

Back