docker-scanning-knowledge
Installation
SKILL.md
Docker Image Scanning Knowledge Base
Quick reference for vulnerability scanning and compliance checking in PHP container images.
Scanning Tools Comparison
| Tool | Type | License | Strengths |
|---|---|---|---|
| Trivy | CLI, CI, Operator | Apache 2.0 | OS + app deps, IaC, SBOM, fast |
| Grype | CLI, CI | Apache 2.0 | Fast, Syft integration, accurate |
| Snyk | CLI, CI, IDE, Web | Commercial | Deep analysis, fix suggestions |
| Docker Scout | CLI, Desktop | Commercial | Docker-native, real-time, policy |