Tools / Container security scan

Container security scan

Check a public Docker image for known vulnerabilities, or a Dockerfile, docker-compose, Kubernetes or Terraform file for misconfigurations and hard-coded secrets. Powered by Trivy.

I'm not a robot

What it checks

Public image: known vulnerabilities (CVE / GHSA) in the operating-system packages and the language libraries inside the image, with severity and the version that fixes each one, plus whether the base OS is end-of-life. The image is downloaded and inspected — it is never run. Images up to 1.5 GB (compressed, linux/amd64).
Config files: Dockerfile, docker-compose, Kubernetes and Terraform misconfigurations — running as root, privileged containers, :latest tags, missing resource limits, open security groups — and hard-coded secrets in your file.

Privacy & limits

Pasted files are scanned in memory and deleted immediately; secret values are never shown, only their type and line. Only public images can be scanned — never enter registry credentials. 3 new image scans per day; an image someone scanned in the last 24 hours opens instantly.

Want this on every build and deploy? We integrate container and IaC scanning into CI/CD.

Scanning by Trivy (Aqua Security, Apache-2.0). Results are automated and may include unconfirmed or disputed advisories.