Key Differences between VM and Container Vulnerability Scanning

As we explore the various options for integrating vulnerability scanning into containers running in Azure, we encountered many different approaches and requests. I was initially writing a document for internal discussions, outlining some of our internal goals for how we want to think about container security, and why we might take one approach or another….


ACR Build OS & Framework Patching Now Supports Docker Hub

In May we announced the public preview of ACR Build, enabling OS & Framework patching. When we announced the preview, only Azure Container Registries were supported for base image update notifications. With DockerCon starting this week, it’s only appropriate we add support for base in Docker Hub. Docker build a locally scoped directory in Azure,…