Containers

Docker and image registries

The system packages in your Docker images (OpenSSL, glibc, curl…) finally in your monitoring.

What the connector does

TechWatchAlert reads the layers of your container images and extracts the base system packages: apt, apk and rpm. It works with public and private OCI-compatible registries (Docker Hub, GHCR, GitLab, Harbor, Quay…), read-only.

What comes into TechWatchAlert

Installed packages (Debian, Ubuntu, distroless, Alpine, Red Hat, Rocky, Alma, Fedora…), under their source package name
The image's operating system, with its end of life tracked
For Ubuntu, Red Hat, Rocky, Alma and SUSE, a comparison with the distribution's advisories, backported fixes included
Multi-architecture images, read as linux/amd64 first

Setup

Enter an image reference (for example nginx:1.27 or ghcr.io/acme/api:prod), then “Track image”
For a private image, add the registry with a read-only token (GHCR: read:packages; GitLab: read_registry; Harbor: “pull” robot account; Docker Hub: read-only token)

In the same family

KubernetesThe images actually running in your clusters, discovered with nothing more than permission to list pods.View connector →

Connectors

Plug in your tools in minutes

Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.

Talk to the team

Free plan, no credit card · hosted in France