Scanning Multi-Architecture Images
Scanning Multi-Architecture Images
Handle multi-architecture images properly:
# Scan specific architecture
trivy image --platform linux/amd64 myapp:latest
trivy image --platform linux/arm64 myapp:latest
# Scan all architectures
for platform in linux/amd64 linux/arm64 linux/arm/v7; do
echo "Scanning $platform"
trivy image --platform $platform myapp:latest > report-$platform.json
done
# Compare vulnerabilities across architectures
python3 << EOF
import json
import glob
results = {}
for report in glob.glob('report-*.json'):
with open(report) as f:
data = json.load(f)
platform = report.replace('report-', '').replace('.json', '')
vulns = sum(len(r.get('Vulnerabilities', [])) for r in data.get('Results', []))
results[platform] = vulns
print("Vulnerabilities by platform:")
for platform, count in results.items():
print(f" {platform}: {count} vulnerabilities")
EOF