Kontinuierliches und skalierbares Schwachstellenmanagement bei Palantir

This post introduces Palantir's Container Vulnerability Scanner (CVS) as a framework for continuous and scalable vulnerability management. It details the integration of multiple scanners (Trivy, ClamAV, Jfrog Xray) to scan container images and software dependencies. The post highlights the coupling of CVS with Apollo for automated remediation and compliance with SLAs, including specific timeframes for different severity levels. It also discusses the use of minimized, scratch-based container images to reduce attack surfaces and the process of scanning software components upon registration in the Apollo catalog before deployment.