FahamLah

Commands

docker scout quickview|cves

docker scout quickview|cves <image>

Safe

What it does

Checks an image's packages for known holes (CVEs). Needs a Docker login.

When to use it

Before you push, and again now and then: new holes appear.

Example

$ docker scout cves --only-severity critical,high kedai:1.0

Only the two worst kinds of holes.

$ docker scout quickview kedai:1.0

A short summary of the holes.

$ docker scout cves --exit-code kedai:1.0

Exit code 2 when it finds holes. Good for scripts.

Learn it in: Scan for holes: Scout and Trivy · Official docs