Container Scanning

Veracode Container/IaC/Secrets Scanning Component This Veracode Container/IaC/Secrets Scanning Component runs the Veracode-CLI on any GitLab pipeline

About The Container/IaC/Secrets Scanning Component is designed to be used in a CI/CD pipeline to scan a local folder, remote repository, image or archive for 3rd party library vulnerabilities, infrastructure as code misconfigurations and stored secrets.

For more information on Pipeline Scan visit Veracode Help Center Page: https://docs.veracode.com/r/Veracode_Container_Security

Go packages to implement analyzers

Scan Docker images for known vulnerabilities

Project for testing GitLab Container Scanning functionality.

Use for a demonstration of GitLab CI/CD/Security Dashboard integration with Trivy: https://gitlab.com/aquasecurity/trivy-ci-test