Scan with Veracode Container Security
Veracode Container Security scans return vulnerability data and policy evaluations based on several categories of findings.
Before you begin:
- Ensure you have installed the Veracode CLI.
- If you want to run container security scanning in a Docker container, ensure you have installed a package containing compatibility libraries for
glibc
, such aslibc6-compat
.
To complete this task:
-
At the command prompt, run this command:
./veracode configure
. -
When prompted, enter the API ID and secret key you generated in the Veracode Platform.
-
Run the
scan
command with the appropriate target type, target, and flags. For example:./veracode scan --source alpine:latest --type image
To print the output to a file, add the
-o
flag. You can share this file or save it as an artifact in a pipeline. For example:./veracode scan --source alpine:latest --type image -o alpine-latest.json
-
Review the results.