Container security

JustScanSee the risks.
Ship with confidence.

Check container images and Helm charts for vulnerabilities before they reach production. JustScan makes risks visible so your team can address them.

For engineering teams and platform owners.

Open JustScan Discuss a project

Features

What JustScan does.

See which packages need an update before your next deployment, instead of reacting in production.

01
Know what is in your images
Scan container images with Trivy or an Artifactory Xray integration. Review findings and scan history in a shared web interface.
02
Discover from GitOps
Connect repositories to discover images in Kubernetes manifests, Kustomize roots and configured Helm charts. Preview discovery before queuing scans.
03
Make security part of delivery
Use the API or CLI to submit registry images and archives. Pipeline scans return policy verdicts suitable for CI automation.
04
A shared view for your team
Use organization-aware workflows and OIDC sign-in. Status pages can follow repositories or a selected set of discovered images.

How it works.

From a container image to a clear decision.

01
Select
Provide a registry image, upload an archive or discover images from a Git repository.
02
Inspect
Review vulnerability findings and scan history to understand what needs attention.
03
Improve
Update affected packages and scan again, or use policy verdicts in your delivery pipeline.

JustScan

Hosting and setup.

Self-host with Docker Compose or Helm. JustScan combines a Go backend, Next.js frontend and PostgreSQL. Choose Trivy scanning or configure your Artifactory Xray integration. The repository is MIT-licensed.

Open JustScan Discuss a project

JustScanContainer security

Focus

Container images
Helm charts
Vulnerabilities
Self-hosted

Links

Common questions

Answers about JustScan.

JustScan discovers container images from configured Helm and Kubernetes sources and scans those images. It is not a blanket audit of every chart setting.