Interactive Guide to the procfs Package Mapping Workflow
Published: October 5, 2026
Overview
- This eight-step diagram follows
libssl.so.3loaded by a worker in the runningnginxcontainer, through/procreads and the container’s dpkg records to a match with Trivy’s reportedlibssl3version3.0.16-1~deb12u1and aconfirmedloading record - It illustrates the process-to-package mapping and scan-matching workflow described in How to Map Running Container Processes to OS Packages with procfs
- The values are actual measurements from September 12, 2026, showing one worker from the
nginxcontainer started from thenginx:1.27image
Diagram
JavaScript is required to use this interactive guide.
Measurement results, exceptions, and limitations are explained in How to Map Running Container Processes to OS Packages with procfs. The Interactive Guide to the bpftrace Measurement Workflow shows how recording events as they happen can capture short-lived activity that periodic reads can miss.
KestreLynx is open-source software that regularly scans images used by running Docker and Kubernetes containers with Trivy and sends changes since the last scan and priorities based on severity, CISA KEV, and EPSS to Slack or a webhook. For Docker and Compose, remediation plans and pull requests (experimental) support remediation from comparing update candidates to creating GitHub pull requests, with both features disabled by default. Users handle merging, rebuilding, and deployment.