Is it sufficient to scan Docker host or is necessary to scan every single container?

[t-markmann]

We have some Docker containers running. Would this application detect log4j inside the docker containers, if we run it just on the host (for example in /var/lib/docker)? Or do we have to exec the program in the bash on every single Docker container?

[christinloehner]

As far as I can see, you'd need to scan each container on its own from inside the container

[juliusmusseau]

Cool question. I will investigate this and get back to you.