Skip to content

[ENH] - Scan Docker images for vulnerabilities #217

@marcelovilla

Description

@marcelovilla

Context

We currently do not have any mechanism in place to scan our Docker images for potential vulnerabilities once they have been built. Given that we already leverage Trivy in Nebari to scan for IaC misconfigurations, it would be worthwhile to extend its use here to scan the images after they have bee built.

Value and/or benefit

This would help us identify and remediate new and existing vulnerabilities in our different images.

Anything else?

No response

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions