CIS Docker Check Issue

[haoyu1101]

Question

Hi Community,

I did the CIS docker check with the following command:
trivy image --compliance docker-cis <image name>

And this is the scan result:

However, I also executed the scan with --scanner parameter for configuration and secrets check with this command:
trivy image --scanners vuln,config,secret,license --severity unknown,low,medium,high,critical <image name>

The result didn't show any misconfiguration issues. I believe CIS docker is checking the misconfiguration parameter. Therefore, would like to confirm which scan result we should reference?

Thanks!

Target

Container Image

Scanner

Misconfiguration

Output Format

Table

Mode

None

Operating System

Ubuntu

Version

Version: 0.41.0