Last changed
docker pull cgr.dev/chainguard/neuvector-scanner
Need access to a specific version? Contact us.
Get notified of upcoming product changes, critical vulnerability notifications and patches and more.
Sign InA Wolfi-based image for NeuVector - a full lifecycle container security platform.
The image is available on cgr.dev
:
Install the NeuVector Helm chart repository and update:
Refer to NeuVector's documentation on generating internal certs here. These are not provided out of the box as they should be changed within a production environment.
Create a namespace for NeuVector:
Create a secret with the internal certs:
Deploy the custom resource definition:
Deploy NeuVector core:
Note that the container runtime will need to be changed depending on where NeuVector is deployed. For example, for k3s we would set:
By default, the runtime is set to docker.
The *.internal.certificate.*
entries can all be removed except for *.internal.certificate.secret
if using the default values of keyFile=tls.key
, pemFile=tls.pem
, and caFile=ca.crt
.
Deploy the monitor chart with prometheus exporter:
The API service is changed as by default it points to a non-existant neuvector-svc-controller-api
service.
You're now running NeuVector with Chainguard images! Consult NeuVector's documentation for additional configuration.
Chainguard Images contain software packages that are direct or transitive dependencies. The following licenses were found in the "latest" version of this image:
Apache-2.0
LGPL-2.1-or-later
MIT
MPL-2.0
For a complete list of licenses, please refer to this Image's SBOM.
Software license agreement