How to scan a docker image with Compliance Library included in FNCI V7
How to scan a docker image with Compliance Library included in FNCI V7
In FNCI V7, docker scanning is using a project type as inventory which means a remote scanning where Compliance Library is not included. So here is a way to scan a docker image with exact matches and fingerprint matches enabled (with Compliance Library).
The alternative way can be as below:
1. Export the docker image into an archive file.
2. Then create a standard project in the FNCI
3. And now upload this archive file by selecting 'Uploaded file and all contained archives' and then scan the project by selecting comprehensive scan profile (with Compliance Library attached).
This approach will allow you to scan a docker image with Compliance Library included.
