I'm looking for command-line tools that can scan Windows containers for vulnerabilities. My primary focus is to integrate the tool into a CI/CD pipeline. Any suggestions?
tried trivy, but this is not supporting windows containers, at least their open sourced version. Maybe aqua can do that, idk.
sysdig cli scanner is also created only for linux containers.
-
1Searching for software recommendations is off-topic. You may try our sister site softwarerecs.stackexchange.com Note that your question should be improved by providing more details before posting there.Robert– Robert2024年12月14日 16:08:45 +00:00Commented Dec 14, 2024 at 16:08
1 Answer 1
I know Aqua supports Windows containers as per documentation. Another option is Prisma: https://techcommunity.microsoft.com/blog/containers/unlocking-new-possibilities-with-prisma-cloud-and-windows-containers-on-azure-ku/3866485