Hypermedia Security: Container Vulnerability Scan Requirements

v1.0Hypermedia Au

Published 2025-10-01. By Hypermedia Au Security Team. Serial urn:uuid:00a311a9-0378-4a81-bb45-4b9783b73648

Security requirements for container image vulnerability scanning prior to deployment

Download raw JSON

CVE-001 Automated Container Vulnerability Scanning MUST

All container images MUST undergo automated vulnerability scanning using Trivy before deployment to secure environments. The scan must analyze the complete container image including OS packages, application dependencies, and embedded files.

Container vulnerability scanning identifies known security vulnerabilities (CVEs) in OS packages and application dependencies. Trivy is an open-source scanner that checks against multiple vulnerability databases.

scanner

trivy

scan-targets

os-packagesapp-dependencies

severity-threshold

critical-high