[DNM] scout: create exceptions in docker desktop (#20797)

Docker Desktop part of #20581, for 4.35

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
This commit is contained in:
David Karlsson 2024-10-24 17:19:03 +02:00 committed by GitHub
parent aa805b4c91
commit cfd326bfa0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 51 additions and 17 deletions

View File

@ -25,15 +25,14 @@ then that CVE is excluded from analysis results.
To create an exception for an image, you can: To create an exception for an image, you can:
- Create an exception in the [GUI](/manuals/scout/how-tos/create-exceptions-gui.md) of - Create an exception in the [GUI](/manuals/scout/how-tos/create-exceptions-gui.md) of
Docker Scout Dashboard. Docker Scout Dashboard or Docker Desktop.
- Create a [VEX](/manuals/scout/how-tos/create-exceptions-vex.md) document and attach - Create a [VEX](/manuals/scout/how-tos/create-exceptions-vex.md) document and attach
it to the image. it to the image.
The recommended way to create exceptions is to use Docker Scout Dashboard. The The recommended way to create exceptions is to use Docker Scout Dashboard or
GUI provides a user-friendly interface for creating exceptions. It also lets Docker Desktop. The GUI provides a user-friendly interface for creating
you create exceptions for multiple images, or your entire organization, all at exceptions. It also lets you create exceptions for multiple images, or your
once. entire organization, all at once.
## View exceptions ## View exceptions
@ -46,7 +45,7 @@ To view exceptions for images, you need to have the appropriate permissions.
are visible to anyone who can pull the image, since the VEX document is are visible to anyone who can pull the image, since the VEX document is
stored in the image manifest or on filesystem of the image. stored in the image manifest or on filesystem of the image.
### View exceptions in Docker Scout Dashboard ### View exceptions in Docker Scout Dashboard or Docker Desktop
The [**Exceptions** tab](https://scout.docker.com/reports/vulnerabilities/exceptions) The [**Exceptions** tab](https://scout.docker.com/reports/vulnerabilities/exceptions)
of the Vulnerabilities page in Docker Scout Dashboard lists all exceptions for of the Vulnerabilities page in Docker Scout Dashboard lists all exceptions for
@ -59,10 +58,24 @@ selecting the action menu lets you edit or remove the exception.
To view all exceptions for a specific image tag: To view all exceptions for a specific image tag:
{{< tabs >}}
{{< tab name="Docker Scout Dashboard" >}}
1. Go to the [Images page](https://scout.docker.com/reports/images). 1. Go to the [Images page](https://scout.docker.com/reports/images).
2. Select the tag that you want to inspect. 2. Select the tag that you want to inspect.
3. Open the **Exceptions** tab. 3. Open the **Exceptions** tab.
{{< /tab >}}
{{< tab name="Docker Desktop" >}}
1. Open the **Images** view in Docker Desktop.
2. Open the **Hub** tab.
3. Select the tag you want to inspect.
4. Open the **Exceptions** tab.
{{< /tab >}}
{{< /tabs >}}
### View exceptions in the CLI ### View exceptions in the CLI
{{% experimental %}} {{% experimental %}}

View File

@ -1,24 +1,27 @@
--- ---
title: Create an exception using the GUI title: Create an exception using the GUI
description: Create an exception for a vulnerability in an image using the Docker Scout Dashboard. description: Create an exception for a vulnerability in an image using the Docker Scout Dashboard or Docker Desktop.
keywords: Docker, Docker Scout, vulnerability, exception, create, GUI keywords: Docker, Docker Scout, Docker Desktop, vulnerability, exception, create, GUI
--- ---
The Docker Scout Dashboard provides a user-friendly interface for creating The Docker Scout Dashboard and Docker Desktop provide a user-friendly interface
[exceptions](/manuals/scout/explore/exceptions.md) for vulnerabilities found in for creating [exceptions](/manuals/scout/explore/exceptions.md) for
container images. Exceptions let you acknowledge accepted risks or address vulnerabilities found in container images. Exceptions let you acknowledge
false positives in image analysis. accepted risks or address false positives in image analysis.
## Prerequisites ## Prerequisites
To create an in the Docker Scout Dashboard, you need a Docker account with To create an in the Docker Scout Dashboard or Docker Desktop, you need a Docker
**Editor** or **Owner** permissions for the Docker organization that owns the account with **Editor** or **Owner** permissions for the Docker organization
image. that owns the image.
## Steps ## Steps
To create an exception for a vulnerability in an image using the Docker Scout To create an exception for a vulnerability in an image using the Docker Scout
Dashboard: Dashboard or Docker Desktop:
{{< tabs >}}
{{< tab name="Docker Scout Dashboard" >}}
1. Go to the [Images page](https://scout.docker.com/reports/images). 1. Go to the [Images page](https://scout.docker.com/reports/images).
2. Select the image tag that contains the vulnerability you want to create an 2. Select the image tag that contains the vulnerability you want to create an
@ -76,3 +79,21 @@ tab of the [Vulnerabilities page](https://scout.docker.com/reports/vulnerabiliti
in the Docker Scout Dashboard. in the Docker Scout Dashboard.
{{% /create_panel.inline %}} {{% /create_panel.inline %}}
{{< /tab >}}
{{< tab name="Docker Desktop" >}}
1. Open the **Images** view in Docker Desktop.
2. Open the **Hub** tab.
3. Select the image tag that contains the vulnerability you want to create an
exception for.
4. Select the layer that contains the vulnerability you want to create an
exception for.
5. In the **Vulnerabilities** tab, find the vulnerability you want to create an
exception for.
6. Select the **Create exception** button next to the vulnerability.
{{% create_panel.inline / %}}
{{< /tab >}}
{{< /tabs >}}