Docker-multi-scan

A script to automate docker image vulnerability scanning using open-source tools like grype, trivy and docker-scout. And later, filter the result to get the unique ones and store it inside .xlsx file.

Execution Process

1. Get the image details from a input file
2. Pull the image locally if it does not exist
3. Scan using open-source tools and get json files for each
4. Repeats the process untill all images from the input file is completed
5. Parse the json output files from each tool
6. Filter the unique result with details like CVE, Severity, Package, Installed Version, Fixed Versions and Source.
7. Start deleting all the pulled images to save the system storage.
8. Keeps track of failed scans or command errors during the process inside Failed_cases.txt file (only if failed).

Pre-requisites

• Windows envirnoment
• Python3 and run pip install xlsxwriter
• Start Docker (Desktop-GUI or deamon)
• grype, trivy and docker-scout (logged-in) - should be accessible.

Run

usage: docker-multi-scan.py [-h] --file FILE --output OUTPUT

Docker image scan and result filtration

options:
  -h, --help            show this help message and exit
  --file FILE, -f FILE  Input file path containing the list of docker images
  --output OUTPUT, -o OUTPUT
                        Output directory path to save json file and excel file