Webinar - Black Duck: Scanning Docker Images
Recording and Slides for Download
Docker container technology is a highly efficient way to deploy code. It allows you to package your application, along with its dependencies, into a single unit - a container image that can be deployed to a server. However, security vulnerabilities may be present inside the container layers. Scanning Docker images with Black Duck and Synopsys Detect will increase your awareness of possible vulnerabilities in the containers. During our informal webinar, we will walk through scanning a Docker image with the Synopsys Detect GUI and CLI. In particular, we will cover best practices, such as excluding package manager analysis, and we'll cover more advanced topics like re-configuring scan directories, network access, and isolating application components. We hope to see you there!