CVE Scanning Alpine images with Multi-stage builds in Docker 17.05

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Grype

A vulnerability scanner for container images and filesystems

Clair

Vulnerability Static Analysis for Containers

Docker bench security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.