Scanning images for vulnerabilities in Docker - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of scanning Docker images for vulnerabilities?

Scanning Docker images helps find security weaknesses before using them in production. It protects your applications from known security risks.

beginner

Name a popular tool used to scan Docker images for vulnerabilities.

Trivy is a popular, easy-to-use tool that scans Docker images for known vulnerabilities.

beginner

What does the command trivy image your-image-name do?

It scans the specified Docker image for security vulnerabilities and shows a report with found issues.

intermediate

Why should you scan images regularly, not just once?

New vulnerabilities are discovered all the time. Regular scanning helps catch new risks and keeps your software safe.

intermediate

What is a common output detail in vulnerability scan reports?

Reports usually show vulnerability severity (like LOW, MEDIUM, HIGH), affected packages, and fixed versions if available.

Which tool is commonly used to scan Docker images for vulnerabilities?

A Kubernetes

B Git

C Trivy

D Docker Compose

Trivy is a dedicated vulnerability scanner for container images.

What does a vulnerability scanner check inside a Docker image?

A Installed packages and their known security issues

B Network traffic

C CPU usage

D Container logs

It checks installed software packages for known vulnerabilities.

Why is it important to scan images before deployment?

A To speed up the container startup

B To find and fix security risks early

C To reduce image size

D To improve network speed

Early detection of vulnerabilities helps prevent security breaches.

Which severity level indicates the most critical vulnerability in scan reports?

A CRITICAL

B MEDIUM

C HIGH

D LOW

CRITICAL severity means the highest risk level.

How often should you scan your Docker images for vulnerabilities?

A Only once when creating the image

B Never, it's not necessary

C Only after deployment

D Regularly, to catch new vulnerabilities

Regular scans help keep your images secure over time.

Explain why scanning Docker images for vulnerabilities is important and how it helps keep applications safe.

Think about how finding problems early can protect your app.

Describe how to use a tool like Trivy to scan a Docker image and interpret the results.

Imagine you are checking your image for problems before using it.