Bits of .NET

🛡️ Is Your Image Safe?

Base images have known vulnerabilities. Docker Scout scans images for CVEs. Shows severity, fix versions, and remediation steps.

🔧 Scan Image

# Install Docker Scout (Docker Desktop includes it)
docker scout --help

# Scan local image
docker scout quick myapp:latest

# Scan with detailed output
docker scout cves myapp:latest

# Compare with base image
docker scout compare myapp:latest myapp:old

# Show remediation
docker scout recommendations myapp:latest

# Scan during build
docker build --provenance=true -t myapp:latest .
docker scout quick --only-package node

✅ Example Output

• CRITICAL: 3 vulnerabilities found
• HIGH: 5 vulnerabilities found
• MEDIUM: 12 vulnerabilities found
• Fix: Upgrade node from 18.17.0 to 18.18.2
• Fix: Update npm package ‘axios’ from 1.3.0 to 1.5.0