Scanning images with Anchore Engine
Anchore Engine is an open source image scanning tool. It not only analyzes Docker images but also allows users to define an acceptance image scanning policy. In this section, we will first give a high-level introduction to Anchore Engine, then we will show how to deploy Anchore Engine and the basic image scanning use case of Anchore Engine by using Anchore's own CLI tool, anchore-cli.
Introduction to Anchore Engine
When an image is submitted to Anchore Engine for analysis, Anchore Engine will first retrieve the image metadata from image registry, then download the image and queue the image for analysis. The following are the items that Anchore Engine will analyze:
- Image metadata
- Image layers
- Operating system packages such as
deb,rpm,apkg, and so on - File data
- Application dependency packages:
- Ruby gems
- Node.js NPMs
- Java archives
- Python packages
- File content
To deploy Anchore Engine in a Kubernetes...
