---
title: "Announcing FOSSA Container Scanning"
description: "Announcing the availability of FOSSA Container Scanning, a tool that helps identify vulnerabilities and license risks in container images."
canonical_url: "https://fossa.com/blog/announcing-fossa-container-scanning/"
markdown_url: "https://fossa.com/blog/announcing-fossa-container-scanning.md"
content_type: "blog"
language: "en"
date_published: "2021-08-03"
date_modified: "2021-08-03"
author: "Gauthami Polasani"
organization: "FOSSA"
---

# Announcing FOSSA Container Scanning

> Announcing the availability of FOSSA Container Scanning, a tool that helps identify vulnerabilities and license risks in container images.

We are very happy to announce the availability of FOSSA Container Scanning. With Container Scanning, you can now shift left your security posture by scanning and identifying vulnerability and [license risks in your container images](https://fossa.com/blog/containers-open-source-license-compliance.md).

Containers have allowed teams to build fast, achieve greater efficiencies, and operate at an exceptional scale. As a result, we have seen more workloads being migrated to containers over the past few years, with usage only [expected to grow further](https://www.redhat.com/rhdc/managed-files/rh-enterprise-open-source-report-f27565-202101-en.pdf). With containers becoming an increasingly key part of open source usage, organizations have to ensure their [container images are as secure as possible](https://fossa.com/blog/container-image-security-vulnerability-scanning.md) before being deployed into production.

With FOSSA Container Scanning, you’ll be able to:

- Identify vulnerabilities in your rpm, apk, and deb packages.
- Inventory the licenses in your container images.
- Get developer-friendly reporting, including layer differentiation between base image vs. non-base image layers for identified packages.

Below are a few examples of what you can expect when using FOSSA Container Scanning.

  ![Base layer dependency](https://fossa.com/Base-Image.png)
  Base layer dependency

  ![Container image scanning results](https://fossa.com/Container-Scanning-Launch1-3.png)
  Actionable scanning results

FOSSA Container Scanning currently supports Alpine, Busybox, CentOS/Redhat, Debian, and Ubuntu Linux system-level packages in Docker and OCI container images.

<br />
Learn more about our container functionality and how FOSSA can enable you to identify and remediate
license and security risk in your open source by [requesting a quick
demo](https://fossa.com/request-demo?utm_source=blog).

## Source

Canonical page: https://fossa.com/blog/announcing-fossa-container-scanning/