thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Intermediate

Image Scanning

Analyzing container images for known vulnerabilities, misconfigurations, secrets, and license issues.

Definition

Scanners such as Trivy, Grype, Docker Scout, Clair, and registry-native scanning (ECR, ACR via Defender, Artifact Analysis) compare installed packages to CVE databases. Pipelines fail builds above a severity threshold.

Example

trivy image --severity CRITICAL --exit-code 1 api:1.2

Exam tip

Scan in CI and continuously in the registry, since new CVEs appear after build.

Related terms