Scanning Multi-Architecture Images

Scanning Multi-Architecture Images

Handle multi-architecture images properly:

# Scan specific architecture
trivy image --platform linux/amd64 myapp:latest
trivy image --platform linux/arm64 myapp:latest

# Scan all architectures
for platform in linux/amd64 linux/arm64 linux/arm/v7; do
    echo "Scanning $platform"
    trivy image --platform $platform myapp:latest > report-$platform.json
done

# Compare vulnerabilities across architectures
python3 << EOF
import json
import glob

results = {}
for report in glob.glob('report-*.json'):
    with open(report) as f:
        data = json.load(f)
        platform = report.replace('report-', '').replace('.json', '')
        vulns = sum(len(r.get('Vulnerabilities', [])) for r in data.get('Results', []))
        results[platform] = vulns

print("Vulnerabilities by platform:")
for platform, count in results.items():
    print(f"  {platform}: {count} vulnerabilities")
EOF