A Cumulative Tool for Docker Vulnerability Scanner

Abstract

Docker container technology is a new virtualization technique that is extremely efficient throughout the development and deployment phases. Although Docker container technology is more convenient than traditional virtualization technology (virtual machines); it suffers from weak security due to inexperienced Docker image auditing techniques. To protect the host computer or local Docker containers from malicious Docker containers, it is required to detect potential hazards in Docker images and identify risks when Docker container instances are running on the host computer. This paper proposes a tool to give the cumulative report of the three major open-source vulnerability scanners like Trivy, Clair, and Grype.