NASA-AMMOS / slim

Software Lifecycle Improvement & Modernization
https://nasa-ammos.github.io/slim/
Apache License 2.0
24 stars 9 forks source link

[New Best Practice Guide]: Container Vulnerability Scanning #155

Open riverma opened 1 month ago

riverma commented 1 month ago

Checked for duplicates

Yes - I've already checked

Describe the needs

We need a guide to satisfy the following process improvement needs: scanning Docker (or other container types) for vulnerabilities. This need has been addressed by NASA projects and we'd like to share recommendations for tools.