Tencent Cloud

Recent Pages

Local Image

Last updated: 2024-10-30 14:51:07

This document describes the local image feature and how to enable data scan and view the local image list.
﻿
Enabling Data Scan
The data scan module displays the number of images at risk, total number of images, and the numbers of vulnerabilities, viruses, trojans, and sensitive data pieces in the images after the last scan.
Enabling quick scan
1. Log in to the TCSS console and click Image Risk Control > Local Images on the left sidebar.
2. On the Local Images page, click Scan now on the right to scan again and get the latest image data or risk information.
3. On the Scanning settings page, select the Risk category and Images as needed.
Risk category: Vulnerabilities or Sensitive data.
Images:  All images  or  Specified images . Click 
﻿
 or 
﻿
 to select or delete the target specified image.
Note: 
 You can press Shift to select multiple ones.
﻿
4. After selecting the target content, click Scan now.
Note: 
 After the scan starts, images with the same ID will be scanned, and only one image scan quota will be consumed.
Enabling scheduled scan
1. On the Local Images page, click Scheduled scan settings on the right to specify whether to enable the scheduled scan feature.
﻿
2. On the Scheduled scan settings page, toggle on the On/Off switch and set the Frequency, Risk category, and Images as needed.
Frequency: It can be every day, every 7 days, every 15 days, every 30 days, or a specified time range.
Risk category: Click 
﻿
 to select Vulnerabilities, Sensitive data, or Virus & Trojan as needed.
Images: All images or Specified images. Click 
﻿
 or 
﻿
 to select or delete the target specified image.
Note: 
 You can press Shift to select multiple ones.
﻿

 3. After selecting the target content, click Set or Cancel.
Enabling data update
On the  Local Images  page, click  Sync assets  on the right side and then click Start Updating to immediately update all image-related asset information and security information. Custom nodes and full host nodes can be updated.
Note: 
 It takes up to one to three minutes.
﻿
Viewing the List of Local Images
Filtering images
On the Local Images page, filter images as follows:
Click the scanning status drop-down list to filter images by scanning status.
﻿
Click the security status drop-down list to filter images by security status.
﻿
Click 
﻿
 to select  Display only running container images  and  Show only recommended disposition images . You can determine the image assets that you need to pay attention to based on factors such as the risk urgency.
﻿
﻿
Click the search box and search for images by keyword such as image name or image ID.
﻿
Exporting an image
On the Local Images page, click 
﻿
 to select the target local image and click 
﻿
 to export it.
﻿
Viewing the list details
1. On the Local Images page, click Image name to pop up the drawer on the right, which displays the image details.
Note: 
Image risk: It indicates whether the image scan is successful and the numbers of vulnerabilities, viruses, trojans, and sensitive data pieces.
Image details: It includes the image name, image ID, image size, and operating system type.
Vulnerability list: You can filter image security vulnerability events by vulnerability severity or search for them by vulnerability name. Click View details to view the vulnerability details and fix suggestion.
Virus and trojan list: You can filter image security events by virus or trojan severity or search for them by filename. Click View details to view the virus or trojan details and suggestion.
Sensitive data list: You can filter security events by sensitive data severity, name, or type.
Image build history: It logs the image build history.
﻿
2. On the Local Images page, click Associated servers to pop up the details window, which displays the server name, server IP, and Docker version.
Note: 
 If multiple servers are associated, you can filter them as follows:
Click the server status drop-down list to filter servers by status.
Click the search box and search for servers by keyword such as server name, project, or Docker version.
3. On the Local Images page, click Associated containers to pop up the details window, which displays the container name, container ID, container running status, CMD, and last update time.
Note: 
 If multiple containers are associated, you can filter them as follows:
Click the status drop-down list to filter containers by status.
Enter the server name and click 
﻿
 for search.
4. On the Local Images page, click Details to display the drawer on the right, which displays the image name.
Image scanning
1. On the Local Images page, click Scan > OK to scan an image in "Not scanned" status.
﻿
2. On the Local Images page, click Scan again after the previous scan task ends to scan the image again.
Note: 
Click 
﻿
 to select multiple images and then click  Scan again  to batch rescan them.
﻿
3. On the Local Images page, click Cancel scanning to cancel scanning an image in "Scanning" status.
Note: 
Click 
﻿
 to select multiple images and then click  Cancel scanning  to batch cancel the scan tasks.
﻿
Custom list management
1. On the Local Images page, click 
﻿
 to pop up the Custom List Management window.
2. In the pop-up window, select the target type and click OK.
﻿
Key fields in the list
1. Creation time: The time when the image is created.
2. Last scanned: The time of the last scan.
3. Risks: Type of the risks to the container.
4. Status: Container scanning status, which can be Scanned, Not scanned, Scanning, Cancelled, or Scan exception.
Note: 
 We recommend you scan again in case of an exception.