Managing Image Security Vulnerabilities

The image security vulnerability checking function allows you to manually or automatically check the OS package security vulnerabilities and Secrets included in the images stored in the Container Registry. Users can identify and remove known vulnerabilities (CVE) and Secrets based on the inspection results, preventing the use of insecure images.

Vulnerability Check Support Information

Supported OS

The vulnerability checking function supports checking of libraries installed with a package manager on the following OS.

Supported Language

The vulnerability checking function supports checking for the following languages.

Support Secret

The vulnerability scanning feature supports the following types of secrets included in the image.

Checking image security vulnerabilities (manual)

To check for image security vulnerabilities, follow the next procedure.

1. Click on the menu for all services > Container > Container Registry. It moves to the Service Home page of Container Registry.
2. Service Home page, click the Image menu. It moves to the Image list page.
3. Image list Click the Settings icon at the top of the page to check the detailed information and select the Registry name and Repository name where the Image is stored, respectively.
4. On the Image List page, click the resource (Image) to check for security vulnerabilities. It moves to the Image Details page.
   • Click the Tags tab to the right of the detailed information tab at the top of the Image Details page. Move to the Tags tab page.
5. On the Tags tab page, click the more button located at the right end of the tag to check security vulnerabilities, then click Vulnerability Check.
6. When the vulnerability check alert popup window opens, click the Confirm button.
   • When the inspection starts, vulnerability check will be performed. message is displayed.
   • After the inspection is complete, a summary of the inspection results and the View Results button are displayed in the Vulnerability Check Results section. When you click the View Results button, a popup window appears where you can view detailed analysis results of vulnerabilities by Image Digest(Tags).

Check the image security vulnerability check result

To check the vulnerability check result, follow the next procedure.

1. Click on the menu for all services > Container > Container Registry. It moves to the Service Home page of Container Registry.
2. Service Home page, click the Image menu. It moves to the Image list page.
3. Image list Click the Settings icon at the top of the page to check the detailed information and select the Registry name and Repository name where the Image is stored, respectively.
4. On the Image List page, click the resource (Image) to check for security vulnerabilities. It moves to the Image Details page.
   • Click the Tags tab to the right of the detailed information tab at the top of the Image Details page. Move to the Tags tab page.
5. On the Tags tab page, click the View Results button in the Vulnerability Check Result item to check the vulnerability check result.
6. Vulnerability Analysis by Image Tags A popup window appears to show detailed analysis results of vulnerabilities by image tags.

Check the test results by vulnerability unit

You can check the image security vulnerability check results by vulnerability in the Vulnerability tab.

You can check the list of all discovered vulnerabilities in the Vulnerability tab.

Checking the results by package unit

You can check the image security vulnerability check results by package. In the Image Tag-based Vulnerability detail page, click the Package tab to move to the package-based vulnerability page.

In the package tab, you can check the entire package list, the list of packages with vulnerabilities found, and the list of packages with no vulnerabilities found.

Check the test results by secret unit

You can check the image security vulnerability check results by secret. In the Image Tag-based Vulnerability detail page, clicking the Secret tab will move to the secret-based vulnerability page.

In the Secret tab