+ 
-
+
- 
+ 
- 
+
-
+ 
- 
+ 
- 
+ 
- 
+
- 
+ 
-
+
-
+ 
- 
+ 
-
+
-
+
- 
+ 
-
+
- 
+ 
- 
+
- 
+
- 
+
-
+
-
+ 
-
-
+ 
- 
+ 
-
+
-
+
-
+ 
-
+
-
+
-
+
- 
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
-
+
-
+
-
+
-
+
-
+
-
+
- Before starting, let’s understand what exactly is Docker Scout? -Docker Scout is a container image scanning tool built within Docker Desktop as well as CLI with mindset of Shift-Left approach.It lies on the top of the Docker ecosystem and helps developers to find container image vulnerabilities at the time of image build,thus helps organisation to ship secure entire supply chain.Now one might be confused is Docker-Scout another CNAPP tool? As per official documentation,it uses SBOM(Software Bill of Material) with 17+ advisory Databases to analyze and scan images with real time CVEs updates.
+Docker Scout is a container image scanning tool built within Docker Desktop as well as CLI with mindset of Shift-Left approach.It lies on the top of the Docker ecosystem and helps developers to find container image vulnerabilities at the time of image build,thus helps organisation to ship secure entire supply chain.Now one might be confused is that Docker-Scout another CNAPP tool? As per official documentation,it uses SBOM(Software Bill of Material) with 17+ advisory Databases to analyze and scan images with real time CVEs updates.Now let’s see how we can integrate with Azure Container Registry to scan real time image.
@@ -347,13 +347,13 @@LAB -In this lab I have take OWASP Juice Shop App as container image to scan with Docker Scout.
+In this lab I have taken OWASP Juice Shop App as container image to scan with Docker Scout.Go to Azure Portal and search for container Registry and create one.Just for testing I have allowed all public network access to registry from Networking blade,but in production use private N/W +
Go to Azure Portal and search for container Registry and create one.Just for testing I have allowed all public network access to registry from Networking blade,but in the production use private N/W
docker tag bkimminich/juice-shop dockerscoutshubhendu.azurecr.io/owasp:v1
Replace your my loginserver with your own
+Replace my loginserver with yours.
Make sure to deploy Docker Scout resources to the same resource group as the registry.Then review and create. -After successful deployment go to your ACR–> Tokens from Repository Permission blade and copy token, then generate password. You can set password expiration date too. But remember to copy and save password locally, once window is close same password can’t be retrived. You need to regenrate.
+After successful deployment go to your ACR–> Tokens from Repository Permission blade and copy token, then generate password. You can set password expiration date too. But remember to copy and save password locally, once window is close same password can’t be retrived. You need to regenerate.
Same Token/password put into Docker Scout Registry Token blade and click on enable integration.
+Copy the same Token/password put into Docker Scout Registry Token blade and click on enable integration.
Jump over Vulnerabilites blade for more details
To mitigate vulnerabilities jump to patch blade and follow the patch released by specific vendor. +
To mitigate vulnerabilities, jump to patch blade and follow the patch released by specific vendor.
We can check all centralised details from overview blade too.
and we can deploy our own custom policies to set rules from Ploicies blade.
+and we can deploy our own custom policies from Ploicies blade to set rules.
Thanks for reading blog, keep troubleshooting!
@@ -466,29 +465,29 @@
+
-
+
-
+
-
+
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
+
-
+
-
+
-
+
-
+
-
+
-
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+ 
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-
+
-