Scanning and configuration scanning tools

This page summarizes the projects mentioned and recommended in the original post on /r/docker

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • Harbor

    An open source trusted cloud native registry project that stores, signs, and scans content.

  • I've used https://goharbor.io/ (the Open Source free edition) as a Docker/Podman image repostiory and image scanner. In my opinion easy to setup and migrate the images from the "standard" Docker repository into Harbor, and then set various policies depending on present vulnerabilities in the images. One recommendation is to pick one scanner you're happy with and stick with it. Different scanners report different things and that can cause a bit of a confusion regarding reports and policies.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts