> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Container Security

> Scan Docker and OCI container images for OS package vulnerabilities, base layer flaws, and embedded secrets.

Secure cloud-native workloads by scanning container images across registries and Kubernetes clusters.

***

## Container Scan Workflow

1. **Registry Ingestion**: Connect to AWS ECR, GCP Artifact Registry, Docker Hub, or private Harbor registries.
2. **Layer Analysis**: Deconstruct container layers to identify the exact instruction introducing a vulnerability.
3. **Base Image Recommendations**: Suggest hardened minimal base images (Alpine, Chainguard, Google Distroless).
4. **Runtime Protection**: Validate container runtime configurations (read-only root filesystem, non-root user).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.