Docker Image Scanning with Snyk and Github Actions

Описание: This episode is a show and tell on running vulnerability scans on docker images using Snyk and Github Actions and extracting the results using Security Analysis Results Interchange Format (SARIF).

This episode shows a scenario where docker images are built using a base image with known vulnerabilities and rectifying the findings by a version upgrade.

References:
https://github.com/snyk/actions
https://docs.github.com/en/code-secur...

Source code reference:
https://github.com/dyordsabuzo/infras...