Scanning Images Locally Using Anchore Security Scan
Anchore Container Analysis is an open-source static analysis tool that allows you to scan your Docker images and provide a pass or fail result against a policy defined by the user. The Anchore Engine allows the user to pull an image and without running it, analyze the image's content, and evaluate whether the image is suitable for use. Anchore uses a PostgreSQL database to store details of known vulnerabilities. You can then use the command-line interface to scan images against the database. Anchore also makes it very easy to get started, as we will see in the following exercise, as it provides an easy-to-use docker-compose
file to automate installation and get you started as quickly as possible.
Note
If you're interested in learning more about Anchore, there is a large body of documentation and information at https://docs.anchore.com/current/.
In the upcoming exercise, once our environment is up and running, you...