PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Container Scanning & Vulnerability Management

aikido.dev | vulnerability | #supply-chain | #vulnerability-management | #secrets | #cve | #containers | #docker | #sca | #secrets-detection | #container-scanning | #image-security | #image-layers | #cncf
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Container scanning inspects image layers against CVE databases, runs SCA on dependencies, and detects embedded secrets. With 44% of organizations hit by container incidents, it's foundational.
Published
Collected

Related coverage

vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
blog · aikido.dev
The Startup's Open-Source Guide to Application Security
Most breaches start with cloud misconfig, leaked secrets, or vulnerable dependencies. The guide maps free tools—Cloudsploit, Trufflehog, gitleaks, Trivy—to build a startup security stack at zero cost.
research · bishopfox.com
Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research
CVE disclosures are up 85% while exploitation barely moved. Bishop Fox breaks down four Nginx CVEs that looked critical but rarely affect real deployments.
research · blog.quarkslab.com
Reversing Windows Container, episode I: Silo
Series opener on reversing Windows Containers: the user-land internals of Silo creation, the isolation mechanism underpinning the Server Silos that Docker uses on Windows.
research · blog.quarkslab.com
Digging into the OCI Image Specification
A deep dive into the OCI image specification behind container images: how it enables moving images between hosts and sharing filesystem layers efficiently across container processes.
research · blog.quarkslab.com
Digging Into Runtimes – runc
A deep dive into runc, the standardized low-level runtime beneath Docker: container history from LXC to OCI, and how runc spawns and manages containers on Linux.
Back