Skip to content

Feature/lab7#550

Open
Vlad1mirZhidkov wants to merge 11 commits intoinno-devops-labs:mainfrom
Vlad1mirZhidkov:feature/lab7
Open

Feature/lab7#550
Vlad1mirZhidkov wants to merge 11 commits intoinno-devops-labs:mainfrom
Vlad1mirZhidkov:feature/lab7

Conversation

@Vlad1mirZhidkov
Copy link

Goal

Container security: image vulnerability scanning with Docker Scout, Snyk, and Dockle, plus Docker Bench hardening assessment of OWASP Juice Shop.

Changes

  • Added image scan results (Docker Scout CVEs, Snyk findings, Dockle config issues) in labs/lab7/scanning/
  • Added Docker Bench hardening report in labs/lab7/hardening/
  • Added deployment comparison and analysis in labs/lab7/analysis/
  • Added labs/submission7.md with documented findings, top CVEs, and remediation recommendations

Testing

  • Not run (explain why)
  • Manual — all scanners run via Docker against bkimminich/juice-shop:v19.0.0; outputs verified against saved result files in labs/lab7/
  • Automated (name)

Artifacts & Screenshots

  • labs/lab7/scanning/scout-cves.txt
  • labs/lab7/scanning/snyk-results.txt
  • labs/lab7/scanning/dockle-results.txt
  • labs/lab7/hardening/docker-bench-results.txt
  • labs/lab7/analysis/deployment-comparison.txt
  • labs/submission7.md

Checklist

  • Clear, scoped title
  • Docs updated if needed
  • No secrets or large temp files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant