Timeline for Where to find the security hardened docker images
Current License: CC BY-SA 4.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 26, 2019 at 0:46 | comment | added | Lie Ryan | CVE scanner can only be used to detect vulnerabilities in packages installed from the repositories, and it cannot detect novel vulnerabilities, only previously discovered ones. It cannot detect application level unless that bespoke apps also publishes their vulnerabilities in CVE and provide its version identifiers in a manner usable by the scanner (which most apps don't). In which case, you don't need a CVE scanner, just find out the app version directly and feed it to the CVE checker. | |
| Sep 25, 2019 at 21:00 | history | tweeted | twitter.com/StackSecurity/status/1176964735281049600 | ||
| Jun 30, 2019 at 9:51 | comment | added | mchawre | I have answered such similar question here stackoverflow.com/a/56643545/6790948 Have a look. | |
| Oct 17, 2018 at 8:47 | answer | added | Rory McCune | timeline score: 3 | |
| Oct 16, 2018 at 21:31 | history | edited | Ijaz Ahmad | CC BY-SA 4.0 |
added 386 characters in body
|
| Oct 16, 2018 at 21:02 | history | edited | HashHazard | CC BY-SA 4.0 |
grammar fixes to improve readability
|
| Oct 16, 2018 at 20:58 | answer | added | HashHazard | timeline score: 8 | |
| Oct 16, 2018 at 20:37 | history | asked | Ijaz Ahmad | CC BY-SA 4.0 |