How it works.
Trend Micro’s container security delivers a complete security approach to build pipeline image and registry protection with malware, vulnerability, content, and compliance scanners. Trend Micro’s container security scans container images in the software build pipeline, looking for vulnerabilities, malware, secrets and keys, and compliance violations.
Combining vulnerability intelligence with Snyk’s open-source vulnerability database builds an inventory of the open-source libraries that are in use in a container image, and if a vulnerability is discovered in a package, then the system automatically cross-references it with Snyk’s open-source vulnerability database to see if there is a match.
Trend Micro’s container security notifies DevOps teams and the Snyk Application Security Management then enables developers to easily fix their source-code vulnerabilities.
With these sophisticated capabilities, paired with implementing security earlier in the development process, you no longer have to delay the deployment of your containers because of unforseen threats.