Docker-Scout

Learn how Docker Hub and Docker Scout can help development teams ensure a more secure and compliant software supply chain.

We look at Docker’s 2024 milestones and innovations in security, AI, and more, as well as how we helped teams build, test, and deploy more easily and quickly than ever.

Learn how the Docker suite of products — including Docker Desktop, Docker Scout, and Docker Hub — helps you accelerate development, modernize legacy applications, and work more efficiently and securely.

Discover how Docker Scout integrates with secure container repositories to ensure vulnerability-free and compliant images in highly secure environments.

Docker announces significant upgrades to its subscription plans, delivering more value, flexibility, and tools for customers of all sizes.

We explore Zero Trust security and walk through several strategies for implementing Zero Trust within a Docker Desktop-based development environment.

The Docker team introduces Docker Scout health scores to help quickly evaluate image health and simplify software security for developers.

Discover two key metrics to measure your DevSecOps progression effectively. Learn how tracking security vulnerabilities over time and ensuring compliance with security policies can enhance your organization's security posture, driving continuous improvement in your DevSecOps practices.

False positives got you down? VEX works with Docker Scout to filter out false positives in security vulnerabilities. Learn how to get started with this powerful combo.

Docker is now providing a free Docker Scout Team subscription to all Docker-Sponsored Open Source (DSOS) program participants.

Learn how Docker Scout policies can help development and security teams define and achieve an ideal application security posture for organizations.

The recent Forrester Total Economic Impact™ (TEI) study underscores for us the measurable benefits experienced by Docker Business users, including accelerated development agility, reduced time-to-market, and substantial cost savings.

For companies like JW Player, whose core business revolves around streaming, content, and infrastructure, security must be a priority without slowing down delivery or affecting operations. Learn how JW Player uses Docker to help meet such challenges, including how JW Player enabled more than 300 repositories for Docker Scout within just one hour.

We show how Docker Scout policies enable teams to identify, prioritize, and fix their software quality issues at the point of creation.

The Docker Desktop 4.25 release supports the GA of Rosetta for Linux, a feature that furthers the speed and productivity that Docker Desktop brings. We’ve also optimized the installation experience on Windows and simplified Docker Scout image analysis settings in this latest Docker Desktop release.

The maintainers of curl, the popular command-line tool and library for transferring data with URLs, released curl 8.4.0 on October 11, 2023. This version included a fix for two common vulnerabilities and exposures (CVEs), one of which the curl maintainers rate as “HIGH” severity and described as “probably the worst curl security flaw in a long time.” But you can use Docker Scout to check whether you’re using the curl library as a dependency in any of the container images in your organization.

We are excited to announce that Docker Scout General Availability (GA) now allows developers to continuously evaluate container images against a set of out-of-the-box policies, aligned with software supply chain best practices. These new capabilities also include a full suite of integrations enabling you to attain visibility from development into production. These updates strengthen Docker Scout’s position as integral to the software supply chain.

We share highlights from a recent webinar: “Docker Scout: Live Demo, Insights, and Q&A," which is also now available on-demand.

Container security is the process of using relevant toolings to protect your images from malware and vulnerabilities. We look at security for containers in a scalable environment and how Docker can help.

Keeping your secrets secret is an ongoing process, but it’s worth the effort. Learn about Docker features you can use to help prevent leaking secrets.