docs/content/scout/_index.md

2.5 KiB

title keywords description aliases grid
Docker Scout scout, supply chain, vulnerabilities, packages, cves, scan, analysis, analyze Docker Scout analyzes your images to help you understand their dependencies and potential vulnerabilities
/atomist/
/atomist/try-atomist/
/atomist/configure/settings/
/atomist/configure/advisories/
/atomist/integrate/github/
/atomist/integrate/deploys/
/engine/scan/
title link description icon
Quickstart /scout/quickstart/ Learn what Docker Scout can do, and how to get started. explore
title link description icon
Image analysis /scout/image-analysis/ Reveal and dig into the composition of your images. radar
title link description icon
Advisory database /scout/advisory-db-sources/ Learn about the information sources that Docker Scout uses. database
title description link icon
Integrations Connect Docker Scout with your CI, registries, and other third-party services. /scout/integrations/ multiple_stop
title link description icon
Dashboard /scout/dashboard/ The web interface for Docker Scout. dashboard
title link description icon
Policy {{< badge color=violet text="Early Access" >}} /scout/policy/ Ensure that your artifacts align with supply chain best practices. policy
title link description icon
Upgrade /billing/scout-billing/ The free plan includes up to 3 repositories. Upgrade for more. upgrade

Container images are often built from layers of other container images and software packages. These layers and packages can contain vulnerabilities that make your containers and the applications they run vulnerable to attack.

Docker Scout can proactively help you find and fix these vulnerabilities, helping you create a more secure software supply chain. It does this by analyzing your images and creating a full inventory of the packages and layers called a Software bill of materials (SBOM). It then correlates this inventory with a continuously updated vulnerability database to identify vulnerabilities in your images.

You can use Docker Scout in Docker Desktop, Docker Hub, the Docker CLI, and in the Docker Scout Dashboard. Docker Scout also supports integrations with third-party systems, refer to Integrating Docker Scout for more information.

{{< grid >}}