Vulnerability scanning
Vulnerability scanning is the automated or systematic examination of software, systems, or configurations to identify known security weaknesses.
Learn Docker in a Month of Lunches, Second Edition
Security scanning is automated analysis of software or container images for known security vulnerabilities.
- How it is used
- Checks container images for known vulnerabilities when choosing base images, maintaining golden images, or gating CI builds.
- How deep it goes
- Walks through Trivy commands, cache setup, severity filtering, and finding assessment; does not explain scanner internals.
- Examples
- Scans an OpenJDK image with containerized Trivy, then filters by severity or an ignore file.
- What you can do after
- Apply it via Trivy to scan an image and assess whether findings require updates, deployment blocking, or acceptance.
Read how Learn Docker in a Month of Lunches, Second Edition explains vulnerability scanning →
Effective Platform Engineering
A vulnerability scan is an automated examination of software or artifacts for known security weaknesses.
- How it is used
- Automates security compliance within platform pipelines and provides evidence for deployment verification.
- How deep it goes
- Explains reusable pipeline execution and SHA-based verification, while stopping short of scanner internals or vulnerability analysis methods.
- Examples
- Uses reusable pipeline code, container-image commit SHAs, scan logs, and Kubernetes admission controllers.
- What you can do after
- Operate/configure automated scans and deployment checks that verify vulnerability evidence without manual compliance handoffs.
Read how Effective Platform Engineering explains vulnerability scanning →
Related concepts
- deployment pipelinepart of · A sequence of automated or manual stages that builds, tests or validates, packages, and delivers software or models toward deployment.
- Trivyused by · Trivy is an open-source security scanner that detects vulnerabilities, misconfigurations, secrets, and policy violations in software artifacts and infrastructure configurations.
- vulnerabilitymeasures · A vulnerability is a weakness or susceptibility in a system, process, or person that can expose it to harm, misuse, failure, or compromise.
- container imageuses · A container image is a packaged filesystem and configuration artifact from which a container can be created and run.
- Artifact Registryused by · Artifact Registry is Google Cloud's managed service for storing, managing, securing, versioning, and distributing software artifacts such as packages and container images.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.