You want to automate vulnerability scanning in your CI pipeline for image webapp:prod. Which approach is best?

hard📝 Best Practice Q15 of 15

Docker - Security

You want to automate vulnerability scanning in your CI pipeline for image webapp:prod. Which approach is best?

AAdd a step to run <code>docker scan webapp:prod</code> and fail if vulnerabilities found

BOnly scan images manually before deployment

CUse <code>docker build</code> with a scan flag to auto-scan

DIgnore scanning and rely on OS firewall for security

Step-by-Step Solution

Solution:

Step 1: Understand automation needs
Automating scanning in CI means running docker scan during build or test steps.
Step 2: Evaluate options
Manual scanning misses automation benefits; docker build has no scan flag; ignoring scanning is unsafe.
Final Answer:
Add a step to run docker scan webapp:prod and fail if vulnerabilities found -> Option A
Quick Check:
Automate scan + fail on issues = best practice [OK]

Quick Trick: Automate scans in CI, fail on vulnerabilities [OK]

Common Mistakes:

Master "Security" in Docker

9 interactive learning modes - each teaches the same concept differently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

More Docker Quizzes