Is Your Container Image Safe? grype Will Tell You in Seconds!

Hello All,

I’m back again with a tech blog. The last two weeks, we have seen a lot of security attacks, like the Oracle Cloud data breach and the critical Nginx Ingress Controller vulnerability. A lot of people are talking about how it happened, what the reason was, and how to protect ourselves from these breaches.

But how do these attacks affect us??? Definitely, we are not going to suffer if you’re not an Oracle Cloud user or if you haven’t set up an Nginx Ingress Controller in production. But a lot of people don’t care much about security. They think it’s someone else’s priority. The other team will take care of it. But security is so important everyone needs to take care of it. Understand the security implementation for your use case, verify yourself whether you are deploying and using everything in a more secure way.

Let’s see how we can start our security journey in K8s. There are many tools like Grype, Kubescape, and KubeArmor, but the basics start with playing with these tools locally. Install those tools in a local K8s cluster, try them out, see how they perform, and you will gain a lot of insightful ideas.

Today, let’s see Grype, the popular image scanning tool, in action. The company behind this amazing project is Anchore.

Let’s see Grype in action install Grype locally.

curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin

Verify that Grype is installed locally, then let’s start scanning the image using Grype

grype version

Scan your Docker image

grype docker:redis:7.2.4

In the above, I mentioned Docker, but you can also scan Podman images you just need to specify it. Once the scan is finished, you will get the complete details of the image.

How cool is this, right? In just a few seconds, you will get a complete overview of the image.

We will see other features in our upcoming blogs. If you found this useful, please try this project — it is an open-source project.

Happy learning, see you tomorrow :)

[embed]GitHub - anchore/grype: A vulnerability scanner for container images and filesystems A vulnerability scanner for container images and filesystems - anchore/grypegithub.com