Skip to content

DockerShield is a project designed to containerize a React application and scan it for vulnerabilities using **Trivy**. It also generates detailed reports on the security of the created Docker image.

Notifications You must be signed in to change notification settings

gabrielldn/DockerShield

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

DockerShield

📌 About the Project

DockerShield is a project designed to containerize a React application and scan it for vulnerabilities using Trivy. It also generates detailed reports on the security of the created Docker image.


🛠️ Requirements

Before getting started, make sure you have the following programs installed:


📥 Installation

Clone this repository:

# Using GitHub CLI
gh repo clone gabrielldn/DockerShield

# Or using Git
git clone https://github.com/gabrielldn/DockerShield.git

Enter the project directory:

cd DockerShield

🚀 How to Use

🔹 1. Build the Docker image

Use the command below to build the image:

make build

By default, the image will be created with the name docker-shield.

🔹 2. Scan the image

If you want to build and scan the image at once, run:

make all

The build-and-scan.sh script will prompt for the image name and tag. If vulnerabilities are found, the image will be automatically removed.


📊 Security Reports

  • The reports generated by Trivy are stored in the relatory/ folder.
  • The trivy_report.json file contains details of the vulnerabilities found.
  • The SecIssues.md file presents a summary of the vulnerabilities organized by severity.

🛑 Removal of Insecure Images

If vulnerabilities are detected, the image will be automatically removed to prevent misuse.


📝 License

This project is licensed under the MIT License. Feel free to use and modify it!


👨‍💻 Author

Developed by Gabriel Lopes (gabrielldn).


🚀 Enjoy DockerShield and keep your images secure!


About

DockerShield is a project designed to containerize a React application and scan it for vulnerabilities using **Trivy**. It also generates detailed reports on the security of the created Docker image.

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published