Information about the docker scan command, with all the details about the supported flags, is provided in the Vulnerability Scanning for Docker Local Images section in the Docker documentation. These flags include the options to add Dockerfiles with images submitted for scanning and to specify the minimum severity level for the reported vulnerabilities. The CLI command is the same docker scan, supporting all of the same flags. The experience of scanning on Linux is identical to what we have already launched for Desktop CLI, with scanning support for linux/amd64 (x86-64) Docker images. We are now making another update in our security journey, by bringing “docker scan” to the Docker CLI on Linux.

Some of the examples of remediation include recommendations for alternative base images with lower vulnerability counts, or package upgrades that have already resolved the specified vulnerabilities. Vulnerability scan results also provide remediation guidance on things that you can do to remove the reported vulnerabilities. The earlier in your development that you find these vulnerabilities, the easier and cheaper it is to fix them.

We also added a scanning command to the Docker CLI on Docker Desktop for Mac and Windows, so that you can run vulnerability scans for images on your local machine. We incorporated scanning options into the Hub, so that you can configure your repositories to automatically scan all the pushed images. We worked together with our partner Snyk to include security testing options along multiple points of your inner loop. At the end of last year we launched vulnerability scanning options as part of the Docker platform.

Install docker in kali