mirror of
https://gitea.com/mcereda/oam.git
synced 2026-02-09 05:44:23 +00:00
feat: docker scout example commmands and placeholders for docker-related tools
This commit is contained in:
@@ -71,6 +71,7 @@
|
||||
| RPM | Revolutions Per Minute | |
|
||||
| RPM | RPM Package Manager | Package management system used by Linux distributions like Red Hat, (open)SuSE and Fedora |
|
||||
| SAFE | Scaled Agile FramEwork | |
|
||||
| SBOM | Software Bill Of Materials | See [SBOM at a Glance] |
|
||||
| SOPS | Secrets OPerationS | |
|
||||
| SPIFFE | Secure Production Identity Framework for Everyone | |
|
||||
| SQL | Structured Query Language | |
|
||||
@@ -103,6 +104,7 @@
|
||||
|
||||
- [CN (canonicalName vs CommonName) In Active Directory Explained]
|
||||
- [KISS principle is not that simple]
|
||||
- [SBOM at a Glance]
|
||||
|
||||
<!--
|
||||
References
|
||||
@@ -127,3 +129,4 @@
|
||||
<!-- Others -->
|
||||
[cn (canonicalname vs commonname) in active directory explained]: https://www.itechguides.com/what-is-cn-in-active-directory/
|
||||
[kiss principle is not that simple]: https://artero.dev/posts/kiss-principle-is-not-that-simple/
|
||||
[sbom at a glance]: https://www.ntia.gov/sites/default/files/publications/sbom_at_a_glance_apr2021_0.pdf
|
||||
|
||||
1
knowledge base/dive.placeholder
Normal file
1
knowledge base/dive.placeholder
Normal file
@@ -0,0 +1 @@
|
||||
https://github.com/wagoodman/dive
|
||||
@@ -104,9 +104,27 @@ docker logout
|
||||
docker rmi 'alpine'
|
||||
docker image prune -a
|
||||
docker system prune -a
|
||||
```
|
||||
|
||||
```sh
|
||||
|
||||
# Display a summary of the vulnerabilities in images.
|
||||
# If not given any input, it targets the most recently built image.
|
||||
docker scout qv
|
||||
docker scout quickview 'debian:unstable-slim'
|
||||
docker scout quickview 'archive://hw.tar'
|
||||
|
||||
# Display vulnerabilities in images.
|
||||
docker scout cves
|
||||
docker scout cves 'alpine'
|
||||
docker scout cves 'archive://alpine.tar'
|
||||
docker scout cves --format 'sarif' --output 'alpine.sarif.json' 'oci-dir://alpine'
|
||||
docker scout cves --format 'only-packages' --only-package-type 'golang' --only-vuln-packages 'fs://.'
|
||||
|
||||
# Display base image update recommendations.
|
||||
docker scout recommendations
|
||||
docker scout recommendations 'golang:1.19.4' --only-refresh
|
||||
docker scout recommendations 'golang:1.19.4' --only-update
|
||||
|
||||
|
||||
# List builders.
|
||||
docker buildx ls
|
||||
|
||||
@@ -221,14 +239,16 @@ default docker
|
||||
> See <https://github.com/docker/buildx/issues/59>.
|
||||
|
||||
```sh
|
||||
$ docker buildx build --platform 'linux/amd64,linux/arm64,linux/arm/v7' -t 'image:tag' '.'
|
||||
$ docker load …
|
||||
docker buildx build --platform 'linux/amd64,linux/arm64,linux/arm/v7' -t 'image:tag' '.'
|
||||
docker load …
|
||||
```
|
||||
|
||||
## Further readings
|
||||
|
||||
- [GitHub] page
|
||||
- [Podman]
|
||||
- [Dive]
|
||||
- [Testcontainers]
|
||||
|
||||
## Sources
|
||||
|
||||
@@ -244,7 +264,9 @@ $ docker load …
|
||||
|
||||
<!-- Knowledge base -->
|
||||
[containerd]: containerd.placeholder
|
||||
[dive]: dive.placeholder
|
||||
[podman]: podman.placeholder
|
||||
[testcontainers]: testcontainers.placeholder
|
||||
|
||||
<!-- Upstream -->
|
||||
[building multi-arch images for arm and x86 with docker desktop]: https://www.docker.com/blog/multi-arch-images/
|
||||
|
||||
1
knowledge base/testcontainers.placeholder
Normal file
1
knowledge base/testcontainers.placeholder
Normal file
@@ -0,0 +1 @@
|
||||
https://testcontainers.com/
|
||||
Reference in New Issue
Block a user