Primod

Your image scanner tells you what you shipped. It cannot tell you what the container runs now.

A scanner reads the image: the packages and binaries baked in when the build finished. That is the right question to ask.

https://primod.io/?utm_source=mastodon&utm_medium=social&utm_campaign=organic-social&utm_content=scan-describes-the-build&utm_term=tool-gap

#ContainerSecurity #VulnerabilityManagement #RuntimeSecurity