Image security scanning

KCE provides image security scanning for Linux images. You can easily start image security scanning in the KCE console.

Image security scanning is available only for images created based on the following Linux operating systems:

• Alpine Linux: 3.3, 3.4, 3.5, 3.6, 3.7, and 3.8
• Debian: 8, 9, 10, and unstable
• Ubuntu: 12.04 or later
• CentOS: 5, 6, and 7
• Oracle Linux: 5, 6, and 7

Instructions

1. Log in to the KCE console.
2. In the left navigation pane, choose Image Repository > My Images. On the My Images page, click the repository name to go to the image version list page. On the image version list page, find the target image version and click Security Scan in the Operation column.
3. After security scanning is complete, view the detailed vulnerability report. Based on severity, vulnerabilities are classified into four levels: High-risk, Medium-risk, Low-risk, and Unrated.

Note: KCE daily synchronizes the latest vulnerability and patch information from common vulnerabilities and exposures (CVE) databases such as the National Vulnerabilities Database (NVD), Debian Security Bug Tracker, and Ubuntu CVE Tracker, to improve the security of your images.