Before we finish this chapter, we are going to take a look at some of the third-party services available, to help you with the vulnerability assessment of your images.
Third-party security services
Quay
Quay, an image registry service by CoreOS, which was purchased by Red Hat, is similar to the Docker Hub/Registry; one difference is that Quay actually performs a security scan of each image after it is pushed/built.
You can see the results of the scan by viewing the Repository Tags for your chosen image; here, you will see a column for Security Scan. As you can see in the following screenshot, in the example image that we created, there are no problems:
![](https://static.packt-cdn.com/products/9781789616606/graphics/assets/b8495eff-3461-4f4b-8178-922339f5c507.png)
Clicking on Passed will take you to a more detailed breakdown of any...