zoom_in Click to enlarge

Docker Scout

▲ ▼

language

description Docker Scout Overview

Docker Scout is a built-in tool within Docker Desktop that analyzes container images and running containers to identify potential security vulnerabilities, misconfigurations, and performance bottlenecks.

help Docker Scout FAQ

How do I access Docker Scout in Docker Desktop?

Docker Scout is integrated directly into the Docker Desktop interface and can be accessed via the left-hand navigation pane. You can also use the `docker scout` command-line interface to trigger vulnerability scans on your local images.

Does Docker Scout use Snyk for vulnerability scanning?

Docker Scout aggregates vulnerability data from multiple sources to provide a comprehensive overview of security flaws. While Docker has partnered with various security firms over the years, Scout primarily relies on its own continuous vulnerability database to analyze Software Bills of Materials (SBOMs).

Can Docker Scout suggest fixes for vulnerable dependencies?

Yes, one of the standout features of Docker Scout is its ability to recommend specific remediation steps, such as updating a base image or patching a vulnerable package. It highlights the exact layer in the Dockerfile where the vulnerability was introduced to streamline the fix.

Is Docker Scout free to use for enterprise teams?

Docker Scout is available for free within Docker Desktop for individual developers and small teams on a limited basis. However, larger enterprise teams requiring centralized policy management, advanced reporting, and deeper repository integration will typically need a paid Docker Business subscription.

swap_horiz

Looking for Docker Scout alternatives? Compare top competitors ranked & scored

arrow_forward