You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/manuals/scout/quickstart.md
+21-5Lines changed: 21 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -95,6 +95,10 @@ the underlying vulnerable express version to 4.17.3 or later.
95
95
+ "express": "4.17.3"
96
96
}
97
97
```
98
+
> [!TIP]
99
+
>
100
+
> The express package is constantly being updated and depending on when you are running this tutorial, other vulnerabilities with different levels of criticality may be listed. In order to follow this tutorial properly, it is suggested that all vulnerabilities are fixed.
101
+
> In general, it will only be necessary to modify the version of the `express` package to the most current version.
98
102
99
103
2. Rebuild the image with a new tag and push it to your Docker Hub repository:
> The report shown by the `docker scout quickview` command, run on your local machine, may be different from the one shown in the example above.
182
+
175
183
Exclamation marks in the status column indicate a violated policy.
176
184
Question marks indicate that there isn't enough metadata to complete the evaluation.
177
185
A check mark indicates compliance.
@@ -209,7 +217,7 @@ The classic image store doesn't support manifest lists,
209
217
which is how the provenance attestations are attached to an image.
210
218
211
219
Open **Settings** in Docker Desktop. Under the **General** section, make sure
212
-
that the **Use containerd for pulling and storing images** option is checked.
220
+
that the **Use containerd for pulling and storing images** option is checked, then click the `Apply & Restart` button to apply the changes.
213
221
Note that changing image stores temporarily hides images and containers of the
214
222
inactive image store until you switch back.
215
223
@@ -230,7 +238,11 @@ results through a different lens: the Docker Scout Dashboard.
230
238
3. Select **Images** in the left-hand navigation.
231
239
232
240
The images page lists your Scout-enabled repositories.
233
-
Select the image in the list to open the **Image details** sidebar.
241
+
242
+
Select the docker image you want to analyze and click the button shown in the image below to display the **Image details** sidebar.
243
+
244
+

245
+
234
246
The sidebar shows a compliance overview for the last pushed tag of a repository.
235
247
236
248
> [!NOTE]
@@ -239,13 +251,17 @@ The sidebar shows a compliance overview for the last pushed tag of a repository.
239
251
> It might take a few minutes before the results appear if this is your
240
252
> first time using the Docker Scout Dashboard.
241
253
242
-
Inspect the **Up-to-Date Base Images** policy.
254
+
Go back to the image list and click on the image version, available in the **Most recent image** column.
255
+
Then, at the top right of the page, click on the **Update base image** button to inspect the policy.
256
+
257
+

258
+
243
259
This policy checks whether base images you use are up-to-date.
244
260
It currently has a non-compliant status,
245
261
because the example image uses an old version `alpine` as a base image.
246
262
247
-
Select the **View fix** button next to the policy name for details about the violation,
248
-
and recommendations on how to address it.
263
+
Close the **Recommended fixes for base image** popup. In the policy listing, click the **View fixes** button, next to the policy name for details about the violation, and recommendations on how to address it.
0 commit comments