Automating vulnerability assessments of Docker containers using Ansible
Containers are everywhere. Let's look at some of the techniques and tools to perform scans and assess the Docker containers and environments using Ansible.
There are many different ways of evaluating the security of containers. In this chapter, we will look at some of them and how they can be used with Ansible:
Tool | Description |
Docker Bench | A security shell script to perform checks based on CIS |
Clair | A tool to perform vulnerability analysis based on the CVE database |
Anchore | A tool to perform security evaluation and make runtime policy decisions |
| An agent-less vulnerability scanner with CVE, OVAL database |
| OS instrumentation framework for OS analytics to do HIDS-type activities |
Docker Bench for Security
Docker Bench for Security is a shell script to perform multiple checks against the Docker container environment. It will give a more detailed view of the security configuration based on CIS benchmarks. This script supports...
