Container image verification device, container image verification method, and container image verification program

摘要

PROBLEM TO BE SOLVED: To ensure the safety of a container image while reducing the consumption of computational resources by the process of verifying a vulnerability. In a container image verification system, a simple information acquisition unit 121 acquires a container configuration file from a container image database 160 and specifies a package version. The simple collation unit 123 performs simple verification for determining the presence or absence of vulnerabilities in the package included in the container image based on the vulnerability information 170 in which the version of the package and the presence or absence of vulnerabilities are associated with each other. The detailed information acquisition unit 131 executes the container image determined to be vulnerable by the simple verification as the detailed verification target container image, and acquires the package information included in the detailed verification target container image. The detailed collation unit 132 performs detailed verification for determining the presence or absence of vulnerabilities in the package included in the detailed verification target container image based on the vulnerability information 170. [Selection diagram] Fig. 1