DfC pre-scan possible (before pushing an image to a container)?

Question

Is there a way to run a Defender for Containers like-scan before I push an image to a container? My team would like to verify that an image will pass DfC scans before pushing an image....

Answer 1

Hello
Yes, you may use Azure Defender's CI/CD integration or perform a local scan using Trivy or Docker Scout to perform a Microsoft Defender for Containers (DfC) scan prior to publishing an image. To find vulnerabilities early, you can combine Azure Security Center's pipeline scanning with GitHub Actions or Azure DevOps. As an alternative, examine photos locally before pushing them using the Microsoft Defender for Containers CLI.