In this TechRepublic How to Make Tech Work tutorial, Jack Wallen reveals you methods to add the Docker Scout function to the Docker CLI.
You might need heard of Docker Scout, which is a picture analyzer that ships with Docker Desktop. This software makes it straightforward for builders to view vulnerabilities present in Docker photos. Considering you don’t want to deploy a container primarily based on a picture with quite a few vulnerabilities, this software ought to be thought of a must-use.
Even although Scout ships with Docker Desktop, it isn’t included within the Docker CLI – not less than not the neighborhood version of Docker. Fortunately, we are able to add it with out an excessive amount of bother. Here’s how.
I’m going to imagine you have already got the Docker runtime engine put in. With that out of the way in which, create the mandatory listing with the command mkdir -p ~/.docker/cli-plugins.
After you’ve created the listing, obtain the mandatory file with the command wget https://github.com/docker/scout-cli/releases/download/v0.15.0/docker-scout_0.15.0_linux_amd64.tar.gz. Unpack the file with the command tar xvzf *.tar.gz. Move the docker-scout file into the right listing with the command mv docker-scout ~/.docker/cli-plugins/. Give the file executable permissions with chmod +x ~/.docker/cli-plugins/docker-scout.
You can now analyze a picture with a command like docker scout quickview nginx:newest. The outcomes will inform you what number of vulnerabilities have been found within the picture, and you may resolve if you wish to try to mitigate the issues or discover a completely different picture to make use of.
Remember: The safety of your container deployments lives and dies on a basis of safe photos, so Docker Scout will likely be an important element in your workflow.
Subscribe to TechRepublic’s How To Make Tech Work on YouTube for all the newest tech recommendation for enterprise execs from Jack Wallen.