# Do we have a solution for scanning the images built on containerized build agents in Jenkins Master.

We have a CJOC where all the build agents are ephemeral & dockerized. 
We run all the builds on these docker containers whose base image is Amazon Linux. 
We use Kaniko pipeline to build new dockerless docker images on these containerized build agents. 
I want to scan these images built by kaniko pipeline for vulnerabilities before I push it to Amazon ECR. 
We use SNYK for local builds, have also tried SNYK plugin for jenkins but it requires docker daemon installed on a static VM (static VM we don't use)

Have tried the docker in docker solution provided on Cloudbees Docs but that's not feasible in a production environment since we have give root privileges to the running container. 

Any other solutions you can think of ?

if you do have an idea to fix this email me -mayank.sinha@salesforce.com 

P.S. I have used github Actions and it scans the images in a jiffy. I hope we can do the same in Cloudbees Jenkins.

##### Post Metadata
- Posted at: almost 6 years ago
- Net upvotes: 1


## Comments
### Comment 1

Good software needs more promotion

##### Comment Metadata
- Posted at: about 5 years ago
- Author title: Sales Specialist at Polk Brothers




## Related Product
[CloudBees](https://www.g2.com/products/cloudbees/reviews)

## Related Category
[Continuous Integration](https://www.g2.com/categories/continuous-integration)

## Related discussions
- [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team)
  - Posted at: about 13 years ago
  - Comments: 6
- [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section)
  - Posted at: about 13 years ago
  - Comments: 0
- [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm)
  - Posted at: about 13 years ago
  - Comments: 4