Build: docker build -t scanner .
Run: docker run -it --rm -v $(HOME)/.cache/:/root/.cache/ -v /var/run/docker.sock:/var/run/docker.sock scanner /scan.sh
Last active
January 9, 2022 08:05
-
-
Save rajiteh/f4cfe8780f82e4255ca3c7952db8ffca to your computer and use it in GitHub Desktop.
scan the running images in your local docker socket for vulnerabilities using trivy (log4j / log4shell)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| FROM aquasec/trivy | |
| RUN apk add --no-cache docker-cli | |
| ADD scan.sh /scan.sh | |
| ENTRYPOINT ["sh"] |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/sh | |
| for cid in $(docker ps -q); do | |
| image=$(docker inspect --format='{{.Config.Image}}' ${cid}) | |
| if echo ${image} | grep -q '/'; then | |
| echo "-------- Scanning ${image}" | |
| trivy -q image -s CRITICAL ${image} | |
| fi | |
| done |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment