Scan image with Trivy

Fail pipeline if HIGH or CRITICAL CVEs found

trivy image --exit-code 1 --severity HIGH,CRITICAL img:tag

More docker commands

Check image SBOM

docker sbom img:tag

Generate Software Bill of Materials for an image (Docker Desktop)
Inspect running container

docker inspect <container> | jq '.[0].NetworkSettings.Networks'

Drill into network settings of a running container
Docker compose up detached

docker compose up -d --build

Build and start all services in background
Docker compose logs follow

docker compose logs -f --tail=100 <service>

Stream last 100 lines and follow a compose service
Docker compose down with volumes

docker compose down -v

Stop and remove containers, networks, and volumes