docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #17474 from docker/chrisward/vuln-details-view 

Scout vulnerabilities views
This commit is contained in:
Chris Chinchilla 2023-06-23 16:52:42 +02:00 committed by GitHub
parent 94503db854 7cce6932aa
commit 59ea93359c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 22 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
scout/dashboard.md
View File

@ -157,8 +157,28 @@ Each entry in the list shows the following details:
> Docker Scout bases the calculation behind this severity level on a variety > Docker Scout bases the calculation behind this severity level on a variety
> of sources. > of sources.
- The vulnerability CVE ID. - The severity of the vulnerability.
- The vulnerability CVE ID. Selecting the link for the CVE ID opens [the vulnerability details page](#vulnerability-details-page).
- The package name and version affected by this CVE. - The package name and version affected by this CVE.
- The Common Vulnerability Scoring System (CVSS) score for the vulnerability. Docker Scout shows the highest CVSS score from multiple sources. - The Common Vulnerability Scoring System (CVSS) score for the vulnerability. Docker Scout shows the highest CVSS score from multiple sources.
- The number of images in the organization that use the package affected by this CVE. - The number of images in the organization that use the package affected by this CVE. Selecting this link opens the [vulnerability details page](#vulnerability-details-page).
- If Docker Scout knows of a fix for the vulnerability, and if so, the package version of the fix. - If Docker Scout knows of a fix for the vulnerability, and if so, the package version of the fix.
### Vulnerability details page
![Screenshot showing the details of a vulnerability in Docker Scout](./images/dashboard-vulns-details.png)
The vulnerability details page shows detailed information about a particular CVE. The page shows the following information:
- The CVE ID and severity.
- A description of the vulnerability.
- The number of packages affected by the vulnerability.
- The vulnerability publish date.
Following this information is a list of all repositories affected by the vulnerability, searchable by image name. Each entry in the list shows the following details:
- The repository name. Selecting the link for the repository name opens [the repository tag list view](#repository-tag-list).
- The current tag version of the image. Selecting the link for the tag name opens [the repository tag list layer view](#image-layer-view).
- The date the image was last pushed.
- The registry where the image is stored.
- The affected package name and version in the image.

BIN
scout/images/dashboard-vulns-details.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 231 KiB