Tool comparison of Docker security scanner

Finding the right tool for the job can be difficult task. This sheet compares Clair, Docker Bench for Security, Dockerscan, and Lynis.

Tool comparison of Clair, Docker Bench for Security, Dockerscan, and Lynis
ClairDocker Bench for SecurityDockerscanLynis
Description

Clair is an open source container analyzer. It performs static analysis of container images and correlates their contents with public vulnerability databases.

Docker Bench for Security is a small security scanner to perform several tests that are part of the Docker CIS benchmark.

Dockerscan is a Docker toolkit for security analysis which includes attacking tools. It is more focused on side of the offensive than defensive.

Lynis is a security auditing tool for systems running Linux, macOS, or Unix. It can be used for security assessments and configuration audits.

Dependencies

Python 3, booby-ng, click, colorlog, ndg-httpsclient, pyOpenSSL, pyasn1, python-dxf, requests

Strenghts
  • The source code of this software is available
  • More than 25 contributors
  • Screen output is colored
  • More than 3000 GitHub stars
  • The source code of this software is available
  • More than 500 GitHub stars
  • The source code of this software is available
  • The source code is easy to read and understand
  • More than 100 contributors
  • More than 8000 GitHub stars
  • Tool is easy to use
  • Available as package (simplified installation)
  • Commercial support available
  • Used language is shell script
  • Very low number of dependencies
  • Project is mature (10+ years)
  • The source code of this software is available
Weaknesses
Programming language(s)

Golang

Shell script

Python

Shell script

Last release

4.7.1 (2023-08-10)

1.6.0 (2023-08-25)

Unknown

3.0.9 (2023-08-03)

Tool page (last updated)

2023-08-11

2023-08-26

2021-05-08

2023-08-05

Tool score

78

85

64

100

Download

Download

Download

Clone on GitHub

Download

More information

Related topics