mirror of https://github.com/docker/docs.git
scout: rewrite scout overview intro
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
This commit is contained in:
parent
5462298588
commit
824f9ffe38
|
@ -47,19 +47,15 @@ grid:
|
||||||
icon: upgrade
|
icon: upgrade
|
||||||
---
|
---
|
||||||
|
|
||||||
Container images are often built from layers of other container images and
|
Container images consist of layers and software packages, which are susceptible to vulnerabilities.
|
||||||
software packages. These layers and packages can contain vulnerabilities that
|
These vulnerabilities can compromise the security of containers and applications.
|
||||||
make your containers and the applications they run vulnerable to attack.
|
|
||||||
|
|
||||||
Docker Scout can proactively help you find and fix these vulnerabilities,
|
Docker Scout is a solution for proactively enhancing your software supply chain security.
|
||||||
helping you create a more secure software supply chain. It does this by analyzing your images and creating a full inventory of the
|
By analyzing your images, Docker Scout compiles an inventory of components, also known as a Software Bill of Materials (SBOM).
|
||||||
packages and layers called a [Software bill of materials (SBOM)](https://ntia.gov/sites/default/files/publications/sbom_at_a_glance_apr2021_0.pdf).
|
The SBOM is matched against a continuously updated vulnerability database to pinpoint security weaknesses.
|
||||||
It then correlates this inventory with a continuously updated vulnerability
|
|
||||||
database to identify vulnerabilities in your images.
|
|
||||||
|
|
||||||
You can use Docker Scout in Docker Desktop, Docker Hub, the Docker CLI, and in
|
Docker Scout is a standalone service and platform that you can interact with
|
||||||
the [Docker Scout Dashboard](./dashboard.md). Docker Scout also supports
|
using Docker Desktop, Docker Hub, the Docker CLI, and the Docker Scout Dashboard.
|
||||||
integrations with third-party systems, refer to [Integrating Docker
|
Docker Scout also facilitates integrations with third-party systems, such as container registries and CI platforms.
|
||||||
Scout](./integrations/index.md) for more information.
|
|
||||||
|
|
||||||
{{< grid >}}
|
{{< grid >}}
|
||||||
|
|
Loading…
Reference in New Issue