run scan on each docker image
trivy image < enter image name e.g. netbirdio/management:latest >
found vulnerabilities with the following images:
ghcr.io/zitadel/zitadel:v2.54.3
netbirdio/management:latest
postgres:16-alpine
coturn/coturn
caddy
netbirdio/signal:latest
example:
Are you using NetBird Cloud?
No
Please specify whether you use NetBird Cloud or self-host NetBird's control plane.
self-host
Describe the problem When I ran Trivy security scan on the docker images, I found quite a few security vulnerabilities.
To Reproduce
Install Trivy sudo apt-get install wget apt-transport-https gnupg lsb-release wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add - echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list sudo apt-get update sudo apt-get install trivy
run scan on each docker image trivy image < enter image name e.g. netbirdio/management:latest >
found vulnerabilities with the following images: ghcr.io/zitadel/zitadel:v2.54.3 netbirdio/management:latest postgres:16-alpine coturn/coturn caddy netbirdio/signal:latest
example:
Are you using NetBird Cloud? No
Please specify whether you use NetBird Cloud or self-host NetBird's control plane. self-host