Install Trellix Endpoint Security (ENS) for Linux Container Vulnerability Scanner to list and scan images for security vulnerabilities from a docker private registry or docker hub.
You must have Trellix Agent 5.6.4.110 or later installed and running on your system.
Set-up Trellix Endpoint Security (ENS) for Linux Container Vulnerability Scanner.
Log on to the Trellix product download site using your Grant number and the registered email address.
Download Trellix Endpoint Security (ENS) for Linux 10.7.0 Container Vulnerability Scanner package ENS-CVS.tar.gz.
Extract the package:
$ tar -xvzf ENSL-CVS.tar.gzAdd DockerHub username and Docker private registry name, URL and username in the config file. Your current user must have read permission for the config file.
This is the sample config displayed on your screen.
# Copyright (C) 2022 Musarubra, LLC. All Rights Reserved. # Sample User config file # Array of registries # Registry is an object of name, url and username of string type # Add the details of only private registries. # For listing/scanning docker hub images, do not pass registry(-r) flag to the cli. registries: - name: DockerHub # url is the url for the registry url: https://registry.hub.docker.com # username is the user of the registry username: trellixuser #name is the name of the registry which is referred to by the -r flag in cli - name: Docker Private Registry # url is the url for the registry url: https://ubuntu1804.internal.docker.reg.com # username is the user of the registry username: testuser
After updating the config file with all the required details, execute this command to copy the config file to the default $HOME directory.
$ mv .mfecvs.yaml.sample ~/.mfecvs.yamlConfig file should be present in $HOME with DockerHub username and docker private registry details, if available.