Docker and CI/CD · Middle · Question 27 of 75

What does an image scanner such as Trivy check?

1Whether the app passes its unit tests
2How fast the container starts up
✓Correct answer: Known CVEs in OS packages and app dependencies

Explanation

Run it in CI and fail the build on high-severity issues that have a fix. Rebuilding regularly picks up patched base images.

Further reading

Test yourself

Take the Docker and CI/CD · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.