Docker Scan

wikipedia:Docker Scan is a native vulnerability scanning tool integrated into Docker Desktop and Docker Hub, powered by Snyk

Pros:

• Simple and integrated with Docker, which is great if you're already using Docker in your CI/CD pipeline
• Powered by Snyk, so you get the same vulnerability database
• GitHub Action: There's an official Docker Scan GitHub Action that integrates Docker scan directly.

Related

• Docker Scout
• docker scan

See also

• Container scanning, AWS ECR security image scanning, Docker Scout, dependabot, Grype, Coguard