Scanning Images

Common questions this page answers:

• How are container images scanned in Bailo?
• How do I view vulnerability details for a container image?
• What is a CVE?
• How do I rescan an image?

Using scanner

Container images pushed to the Bailo registry are automatically scanned using Trivy, a vulnerability scanner that detects known security issues called CVEs (Common Vulnerabilities and Exposures).

Trivy is a static analysis tool focused on the security of containers, and informing users about potential issues, packaged in Bailo ArtefactScan. You can read more about the principles and scope of Trivy here.

For scan results:

• Go to your model and click on Registry Tab
• Click the Scan chip, towards the right of your image
• View scan results. Vulnerabilities are classified by severity, listing the amount of each as so:

The screenshot above shows the scan status chip on a container image in the Registry tab, with vulnerability counts grouped by severity.

Detailed view

To view more detail, click the 'See detailed results' button. This will take you to the vulnerability report page, which includes the following information:

• Compressed image size
• Vulnerabilities
• Scanner used
• Detailed vulnerability report, containing CVE information

You can filter these results by Severity, using the tags at the top of the page.

The screenshot above shows the detailed vulnerability report page with CVE information and severity filters.

Rescan image

Trigger a rescan of a container image from the scan results menu.

1. Click the 3 dots to the right of the scan results chip
2. Click Rerun image scan

The screenshot above shows the image actions menu with a Rescan option.

Multiplatform images

Bailo supports scanning multiplatform images, which target different architectures.

Bailo also allows you to scan multiplatform images, which are images that point to a different set of layers based on your host architecture. Click the See detailed results button to view the platform-specific, detailed results page.

The screenshot above shows a multiplatform image summary with platform-specific vulnerability breakdowns.