{"id":643,"date":"2022-01-21T22:20:01","date_gmt":"2022-01-21T22:20:01","guid":{"rendered":"https:\/\/thedatabaseengineer.com\/?p=643"},"modified":"2022-01-21T22:21:12","modified_gmt":"2022-01-21T22:21:12","slug":"how-to-scan-docker-images-using-aquasec-trivy","status":"publish","type":"post","link":"https:\/\/thedatabaseengineer.com\/?p=643","title":{"rendered":"How to Scan Docker Images Using \u201caquasec\/trivy"},"content":{"rendered":"
\n
\n \t<\/i> Read Time:<\/span>2 Minute, 15 Second <\/div>\n\n <\/div>\n

Scanning Cloud Hosted WordPress application images:<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

ubuntu@thedatabasengineer-1:~$ sudo docker run –rm -v \/var\/run\/docker.sock:\/var\/run\/docker.sock -v $HOME\/Library\/Caches:\/root\/.cache\/ aquasec\/trivy  nginx:1.15.12-alpine<\/strong><\/p>\n\n\n\n

2022-01-21T21:10:34.894Z        WARN    The root command will be removed. Please migrate to ‘trivy image’ command. See https:\/\/github.com\/aquasecurity\/trivy\/discussions\/1515<\/p>\n\n\n\n

2022-01-21T21:10:34.910Z        INFO    Detected OS: alpine<\/p>\n\n\n\n

2022-01-21T21:10:34.910Z        INFO    Detecting Alpine vulnerabilities…<\/p>\n\n\n\n

2022-01-21T21:10:34.913Z        INFO    Number of language-specific files: 0<\/p>\n\n\n\n

2022-01-21T21:10:34.913Z        WARN    This OS version is no longer supported by the distribution: alpine 3.9.4<\/p>\n\n\n\n

2022-01-21T21:10:34.914Z        WARN    The vulnerability detection may be insufficient because security updates are not provided<\/p>\n\n\n\n

nginx:1.15.12-alpine (alpine 3.9.4)<\/p>\n\n\n\n

===================================<\/p>\n\n\n\n

Total: 38 <\/strong>(UNKNOWN: 0, LOW: 4, MEDIUM: 20, HIGH: 11, CRITICAL: 3<\/strong>)<\/p>\n\n\n\n

Analyze the report and fix CVEs:<\/strong><\/p>\n\n\n\n

Update nginx:1.15.12-alpine to nginx:stable-alpine  in Dockerfile.<\/strong><\/p>\n\n\n\n

ubuntu@thedatabasengineer-1:~\/wordpress$ sudo docker-compose up -d –force-recreate –no-deps webserver<\/strong><\/p>\n\n\n\n

ubuntu@thedatabasengineer-1:~\/wordpress$ sudo  docker run –rm -v \/var\/run\/docker.sock:\/var\/run\/docker.sock -v $HOME\/Library\/Caches:\/root\/.cache\/ aquasec\/trivy  nginx:stable-alpine<\/strong><\/p>\n\n\n\n

2022-01-21T21:40:40.627Z        WARN    The root command will be removed. Please migrate to ‘trivy image’ command. See https:\/\/github.com\/aquasecurity\/trivy\/discussions\/1515<\/p>\n\n\n\n

2022-01-21T21:40:41.000Z        INFO    Detected OS: alpine<\/p>\n\n\n\n

2022-01-21T21:40:41.001Z        INFO    Detecting Alpine vulnerabilities…<\/p>\n\n\n\n

2022-01-21T21:40:41.003Z        INFO    Number of language-specific files: 0<\/p>\n\n\n\n

nginx:stable-alpine (alpine 3.14.3)<\/p>\n\n\n\n

===================================<\/p>\n\n\n\n

Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)<\/p>\n\n\n\n

Verify Image inside container:<\/strong><\/p>\n\n\n\n

ubuntu@thedatabasengineer-1:~\/wordpress$ sudo docker inspect webserver |grep -i image |tail -1<\/p>\n\n\n\n

            “Image”: “nginx:stable-alpine”,      <\/p>\n\n\n\n

Remove old image:<\/strong><\/p>\n\n\n\n

sudo docker rmi nginx:1.15.12-alpine<\/p>\n\n\n\n

Verify WordPress Application<\/p>\n

\n
\n \n
\n \n \"Happy\"\n <\/a>\n
\n Happy <\/div>\n
\n 0<\/span>\n \n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Sad\"\n <\/a>\n
\n Sad <\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Excited\"\n <\/a>\n
\n Excited <\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Sleepy\"\n <\/a>\n
\n Sleepy <\/div>\n
\n 0<\/span>\n \n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Angry\"\n <\/a>\n
Angry<\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n \n <\/div>\n <\/div>\n\n
\n \n \"Surprise\"\n <\/a>\n
Surprise<\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n <\/div>\n <\/div>\n\n ","protected":false},"excerpt":{"rendered":"

Scanning Cloud Hosted WordPress application images: ubuntu@thedatabasengineer-1:~$ sudo docker run –rm -v \/var\/run\/docker.sock:\/var\/run\/docker.sock -v $HOME\/Library\/Caches:\/root\/.cache\/ aquasec\/trivy  nginx:1.15.12-alpine 2022-01-21T21:10:34.894Z        WARN    The root command will be removed. Please migrate to ‘trivy image’ command. See https:\/\/github.com\/aquasecurity\/trivy\/discussions\/1515 2022-01-21T21:10:34.910Z        INFO    Detected OS: alpine 2022-01-21T21:10:34.910Z        INFO    Detecting Alpine vulnerabilities… 2022-01-21T21:10:34.913Z        INFO    Number of language-specific files: 0 2022-01-21T21:10:34.913Z        WARN    This OS version<\/p>\n

Continue reading “How to Scan Docker Images Using \u201caquasec\/trivy”<\/span> <\/svg><\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[13],"tags":[],"class_list":["post-643","post","type-post","status-publish","format-standard","hentry","category-devops"],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=\/wp\/v2\/posts\/643","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=643"}],"version-history":[{"count":2,"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=\/wp\/v2\/posts\/643\/revisions"}],"predecessor-version":[{"id":646,"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=\/wp\/v2\/posts\/643\/revisions\/646"}],"wp:attachment":[{"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=643"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=643"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedatabaseengineer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=643"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}