Skip to content

Commit 4410112

Browse files
committed
Add: Add quickstart.md improvements
1 parent 592b287 commit 4410112

File tree

3 files changed

+21
-5
lines changed

3 files changed

+21
-5
lines changed
8.58 KB
Loading
69.8 KB
Loading

content/manuals/scout/quickstart.md

Lines changed: 21 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,10 @@ the underlying vulnerable express version to 4.17.3 or later.
9595
+ "express": "4.17.3"
9696
}
9797
```
98+
> [!TIP]
99+
>
100+
> The express package is constantly being updated and depending on when you are running this tutorial, other vulnerabilities with different levels of criticality may be listed. In order to follow this tutorial properly, it is suggested that all vulnerabilities are fixed.
101+
> In general, it will only be necessary to modify the version of the `express` package to the most current version.
98102
99103
2. Rebuild the image with a new tag and push it to your Docker Hub repository:
100104

@@ -172,6 +176,10 @@ Policy status FAILED (2/6 policies met, 2 missing data)
172176
? │ Supply chain attestations │ No data
173177
```
174178

179+
> [!NOTE]
180+
>
181+
> The report shown by the `docker scout quickview` command, run on your local machine, may be different from the one shown in the example above.
182+
175183
Exclamation marks in the status column indicate a violated policy.
176184
Question marks indicate that there isn't enough metadata to complete the evaluation.
177185
A check mark indicates compliance.
@@ -209,7 +217,7 @@ The classic image store doesn't support manifest lists,
209217
which is how the provenance attestations are attached to an image.
210218

211219
Open **Settings** in Docker Desktop. Under the **General** section, make sure
212-
that the **Use containerd for pulling and storing images** option is checked.
220+
that the **Use containerd for pulling and storing images** option is checked, then click the `Apply & Restart` button to apply the changes.
213221
Note that changing image stores temporarily hides images and containers of the
214222
inactive image store until you switch back.
215223

@@ -230,7 +238,11 @@ results through a different lens: the Docker Scout Dashboard.
230238
3. Select **Images** in the left-hand navigation.
231239

232240
The images page lists your Scout-enabled repositories.
233-
Select the image in the list to open the **Image details** sidebar.
241+
242+
Select the docker image you want to analyze and click the button shown in the image below to display the **Image details** sidebar.
243+
244+
![View Image Details](./images/image-details.png)
245+
234246
The sidebar shows a compliance overview for the last pushed tag of a repository.
235247

236248
> [!NOTE]
@@ -239,13 +251,17 @@ The sidebar shows a compliance overview for the last pushed tag of a repository.
239251
> It might take a few minutes before the results appear if this is your
240252
> first time using the Docker Scout Dashboard.
241253
242-
Inspect the **Up-to-Date Base Images** policy.
254+
Go back to the image list and click on the image version, available in the **Most recent image** column.
255+
Then, at the top right of the page, click on the **Update base image** button to inspect the policy.
256+
257+
![Policy Inspect](./images/policy-inspect.png)
258+
243259
This policy checks whether base images you use are up-to-date.
244260
It currently has a non-compliant status,
245261
because the example image uses an old version `alpine` as a base image.
246262

247-
Select the **View fix** button next to the policy name for details about the violation,
248-
and recommendations on how to address it.
263+
Close the **Recommended fixes for base image** popup. In the policy listing, click the **View fixes** button, next to the policy name for details about the violation, and recommendations on how to address it.
264+
249265
In this case, the recommended action is to enable
250266
[Docker Scout's GitHub integration](./integrations/source-code-management/github.md),
251267
which helps keep your base images up-to-date automatically.

0 commit comments

Comments
 (0)