Scanning Images

Using Scanner

When pushing images up to the Bailo container registry, your images are automatically scanned. By default, Bailo is configured to use Trivy. Trivy is packaged in Bailo Artefact Scan Trivy is a static analysis tool focused on the security of containers, and informing users about potential issues. You can read more about the principles and scope of Trivy here.

For scan results:

• Go to your model and click on Registry Tab
• Click the Scan chip, towards the right of your image
• View scan results. Vulnerabilities are classified by severity, listing the amount of each as so:

Detailed View

To view more detail, click the 'See detailed results' button. This will take you to the vulnerability report page, which includes the following information:

• Compressed image size
• Vulnerabilities
• Scanner used
• Detailed vulnerability report, containing CVE information.

You can filter these results by Severity, using the tags at the top of the page.

Rescan Image

If you want to rescan, click the 3 dots to the right of the scan results chip and select the Rescan option.

Multiplatform Images

Bailo also allows you to scan multiplatform images, which are images that point to a different set of layers based on your host architecture. You can also click the 'See detailed results' button, and view the platform-specific, detailed results page.