The DockerBench plugin provides an extension to the docker-bench-security.sh. Anything that can be done in the shell script can be done through the plugin. Contrary to plugins like Anchore, docker-bench-security scans your entire Docker Installation for vulnerabilities or best practice violations.
Supported Versions
Docker version 18.06+ (Older versions of Docker may work but have not been tested)
Windows is NOT supported
Key Features
Automatically downloads the docker-bench-security.sh. No configuration/setup is needed in your environment or FlexDeploy.
Provides useful outputs for evaluating the results of the scan in FlexDeploy
Outputs
All operations in this plugin supply the same set of outputs which can be seen below:
Output Name | Description |
|---|---|
FDDKBENCH_OUT_CHECKS | The number of checks ran by the scan. This can vary depending on the number of images/containers in your docker install. |
FDDKBENCH_OUT_SCORE | The overall score of the scan. |