From d38d2f46a70364df4a4bb5fc13cc1720e692adb5 Mon Sep 17 00:00:00 2001 From: rantifamilusi Date: Tue, 14 Apr 2026 17:32:31 -0600 Subject: [PATCH] Revise Docker scout compare command and output Updated the Docker comparison command and improved output formatting. --- content/manuals/dhi/get-started.md | 44 +++++++++++++++++------------- 1 file changed, 25 insertions(+), 19 deletions(-) diff --git a/content/manuals/dhi/get-started.md b/content/manuals/dhi/get-started.md index 23e29a8e19db..3704059d8683 100644 --- a/content/manuals/dhi/get-started.md +++ b/content/manuals/dhi/get-started.md @@ -88,30 +88,36 @@ from Docker Hub: ```console $ docker scout compare dhi.io/python:3.13 \ - --to python:3.13 \ - --platform linux/amd64 \ - --ignore-unchanged \ - 2>/dev/null | sed -n '/## Overview/,/^ ## /p' | head -n -1 + --to python:3.13 \ + --platform linux/amd64 \ + --ignore-unchanged \ + 2>/dev/null | sed -n '/## Overview/,/^ ## /p' | tail -r | tail -n +2 | tail -r ``` Example output: ```plaintext - ## Overview - - │ Analyzed Image │ Comparison Image - ────────────────────┼───────────────────────────────────────────────────────┼─────────────────────────────────────────────── - Target │ dhi.io/python:3.13 │ python:3.13 - digest │ c215e9da9f84 │ 7f48e892134c - tag │ 3.13 │ 3.13 - platform │ linux/amd64 │ linux/amd64 - provenance │ https://github.com/docker-hardened-images/definitions │ https://github.com/docker-library/python.git - │ 77a629b3d0db035700206c2a4e7ed904e5902ea8 │ 3f2d7e4c339ab883455b81a873519f1d0f2cd80a - vulnerabilities │ 0C 0H 0M 0L │ 0C 1H 5M 141L 2? - │ -1 -5 -141 -2 │ - size │ 35 MB (-377 MB) │ 412 MB - packages │ 80 (-530) │ 610 - │ │ + + ┌──────────┬────────────────────┬─────────────┐ + │ Metric │ dhi.io/python:3.13 │ python:3.13 │ + ├──────────┼────────────────────┼─────────────┤ + │ Critical │ 0 │ 4 │ + ├──────────┼────────────────────┼─────────────┤ + │ High │ 0 │ 19 │ + ├──────────┼────────────────────┼─────────────┤ + │ Medium │ 0 │ 20 │ + ├──────────┼────────────────────┼─────────────┤ + │ Low │ 1 │ 179 │ + ├──────────┼────────────────────┼─────────────┤ + │ Unknown │ 0 │ 4 │ + ├──────────┼────────────────────┼─────────────┤ + │ Size │ 22 MB │ 412 MB │ + ├──────────┼────────────────────┼─────────────┤ + │ Packages │ 47 │ 610 │ + └──────────┴────────────────────┴─────────────┘ + + The Docker Hardened Image is dramatically leaner — 95% smaller (22 MB vs 412 MB), 93% fewer packages, and drops from 222 vulnerabilities + down to just 1 low. That's the distroless/minimal base doing its job. ``` > [!NOTE]