Skip to content

Latest commit

 

History

History
16 lines (12 loc) · 637 Bytes

README.md

File metadata and controls

16 lines (12 loc) · 637 Bytes
Raw

Container Scanning without setting up Clair server

What

This repository contains a working example of local container scanning using arminc's prefilled CVE database and Clair. Using this, you won't need to have to setup a whole Clair server, or fill and maintain a CVE database. The bash code is pretty universally applicable, the example is written for gitlabCI and does not require Gitlab Ultimate subscription.

Scan subject

Subject of the scan is a kube-toolbox container I use for K8S work mainly on AWS.

Requirements

Requirements are:

  • Docker

Requirements using the GitlabCI setup:

  • docker-executor --privileged