---
title: "Docker Hardened Images enhanced vulnerability scanning with Docker and Aikido"
url: https://daily.dev/posts/docker-hardened-images-enhanced-vulnerability-scanning-with-docker-and-aikido-fst4ffiik
source_url: https://www.docker.com/blog/docker-hardened-images-enhanced-vulnerability-scanning-with-docker-and-aikido
type: article
source: "Docker"
published: 2026-06-11T12:03:20.153Z
updated: 2026-06-11T12:04:02.625Z
tags: ["security", "docker", "containers", "sbom"]
reading_time: 5
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Docker Hardened Images enhanced vulnerability scanning with Docker and Aikido

**[Docker](https://daily.dev/sources/docker)** · 5 min read · 0 upvotes · 0 comments

## Summary

Aikido security scanner now integrates with Docker Hardened Images (DHI) using built-in VEX (Vulnerability Exploitability eXchange) support. When scanning DHI, Aikido reads Docker's signed OpenVEX attestations and automatically filters out CVEs that Docker has verified as non-exploitable or already patched. The workflow uses signed SPDX 2.3 SBOMs retrieved via OCI 1.1 referrer lookup for accurate component cataloging of distroless images, then matches components against Docker's OSV feed. The result is a dramatically reduced triage queue showing only genuinely applicable vulnerabilities, with suppressed findings retained for audit and compliance purposes (FedRAMP, SOC 2). Setup requires an Aikido account, DHI access, and a Docker Hub Personal Access Token.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.docker.com/blog/docker-hardened-images-enhanced-vulnerability-scanning-with-docker-and-aikido>

## Similar posts on daily.dev

- [Aikido Supports Docker Hardened Images with VEX](https://daily.dev/posts/aikido-supports-docker-hardened-images-with-vex-xjtoh07o8) · Aikido Security · 5 upvotes · 0 comments
- [Reclaim Developer Hours through Smarter Vulnerability Prioritization with Docker and Mend.io](https://daily.dev/posts/reclaim-developer-hours-through-smarter-vulnerability-prioritization-with-docker-and-mend-io-fguoofhlo) · Docker · 0 upvotes · 0 comments
- [Precision Container Security with Docker and Black Duck](https://daily.dev/posts/precision-container-security-with-docker-and-black-duck-wa6vcv1lt) · Docker · 1 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#docker](https://daily.dev/tags/docker), [#containers](https://daily.dev/tags/containers), [#sbom](https://daily.dev/tags/sbom)

[View this post on daily.dev](https://daily.dev/posts/docker-hardened-images-enhanced-vulnerability-scanning-with-docker-and-aikido-fst4ffiik)