Libraries and other code scanned for known programming blunders
10 May 2016 at 13:00, Chris Williams Docker has hit upon an idea that perhaps other platforms could potentially incorporate: scanning software components for publicly known vulnerabilities prior to deployment.
Today, the software container biz will announce Docker Security Scanning, which scours private repositories in the Docker Cloud for recognized security bugs and alerts developers if any are found. The feature will be expanded to Docker Datacenter customers later this year.
Specifically, this opt-in service scans a Docker image when it is pushed to the Docker cloud, and programmatically builds a bill-of-materials (BOM) of the image's software components.
Full Article
