DockerShield is a project designed to containerize a React application and scan it for vulnerabilities using Trivy. It also generates detailed reports on the security of the created Docker image.
Before getting started, make sure you have the following programs installed:
Clone this repository:
# Using GitHub CLI
gh repo clone gabrielldn/DockerShield
# Or using Git
git clone https://github.com/gabrielldn/DockerShield.git
Enter the project directory:
cd DockerShield
Use the command below to build the image:
make build
By default, the image will be created with the name docker-shield.
If you want to build and scan the image at once, run:
make all
The build-and-scan.sh script will prompt for the image name and tag. If vulnerabilities are found, the image will be automatically removed.
- The reports generated by Trivy are stored in the
relatory/
folder. - The trivy_report.json file contains details of the vulnerabilities found.
- The SecIssues.md file presents a summary of the vulnerabilities organized by severity.
If vulnerabilities are detected, the image will be automatically removed to prevent misuse.
This project is licensed under the MIT License. Feel free to use and modify it!
Developed by Gabriel Lopes (gabrielldn).
🚀 Enjoy DockerShield and keep your images secure!