Before we finish this chapter, we are going to take a look at some of the third-party services available, to help you with the vulnerability assessment of your images.
Third-party security services
Quay
Quay, an image registry service by CoreOS, which was purchased by Red Hat, is similar to the Docker Hub/Registry; one difference is that Quay actually performs a security scan of each image after it is pushed/built.
You can see the results of the scan by viewing the Repository Tags for your chosen image; here, you will see a column for Security Scan. As you can see in the following screenshot, in the example image that we created, there are no problems:
Clicking on Passed will take you to a more detailed breakdown of any...