Tenable Container Security Scanner System Requirements
The following feature is not supported in Tenable Vulnerability Management Federal Risk and Authorization Management Program (FedRAMP) environments. For more information, see the FedRAMP Product Offering.
The machine where you want to run the Tenable Container Security Scanner must meet the following requirements.
Software and Hardware Requirements
Deployment Type | Software Requirements | RAM | Temporary Storage | CPU |
---|---|---|---|---|
Local |
Able to run Linux containers |
2 GB | 15 GB | 64-bit multi-core, x86 compatible |
Internet
The machine where you want to run the Container Security Scanner must have access to the Internet when you download and run the scanner. The machine must allow outbound HTTPS traffic for communications with the cloud.tenable.com server.
SSL Certificate Requirements
If the registry that hosts your images requires the HTTPS protocol, you must have an SSL certificate signed by a trusted Certificate Authority (CA) installed on the registry. Refer to your registry's documentation for installing an SSL certificate.
Note: Mozilla's CA Certificate Store is the Tenable Container Security Scanner's trusted certificate authority.
Note: If you want the Container Security Scanner to scan the registry without verifying that a trusted CA signed the certificate, you must include the ALLOW_INSECURE_SSL_REGISTRY variable when you run the scanner. For more information, see Environment Variables.
Supported Container Image Formats
The Container Security Scanner supports the following image formats:
- Docker images
- Open Containers Initiative (OCI) images