Security / Public reference

Container image scan

This check does not scan a container registry. It is listed so a review can say the image was not scanned.

What you need to supply

No registry credentials are used. If the text names an image, the check is skipped because a scanner is not configured. If the text names no image, the check does not apply.

If it reports a finding

It does not produce an image vulnerability finding.

What this does not prove

A completed security review can still show this check as skipped. That is expected. It is not a clean image report.

What a review should say

Skipped. This check does not apply to the supplied input, or container image scanning is not configured.

All review checks. Reading this page does not submit your infrastructure.