Analysis of Docker Images on Static and Dynamic Vulnerability Scanning Tools

The software development industry extensively utilizes Docker a prominent platform image containerization. Therefore, it is imperative to guarantee the security of these containerized applications. As a result, various container scanning technologies exist for identifying container security flaws. This study examines static and dynamic scanners, the prevalent tools for analyzing Docker images. The paper will present a comprehensive comparison of the advantages and disadvantages of several types of scanners, accompanied by real-world examples of their application in securing containerized applications. This study paper intends to analyze four prominent open-source vulnerability tools: Snyk, Swift, Trivy, and Grype. The report will present a comprehensive comparison of the characteristics and capabilities of each scanner, including their accuracy, usability, use cases, best practices, limitations, and potential future developments.