Merge pull request #10160 from KoryKessel-Docker/ENGDOCS-316-matching-overriding-vulnerability-new-DTR2.5-edit

Updated Overriding a Vulnerability topic to match DTR 2.5 edit.
This commit is contained in:
DocKor 2020-01-17 19:24:39 +01:00 committed by GitHub
commit f91cd23116
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 21 additions and 35 deletions

View File

@ -16,7 +16,7 @@ DTR scans images for vulnerabilities. At times, however, it may report image vul
3. Click **View details** to review the image scan results, and select **Components** to see the vulnerabilities for each component packaged in the image. 3. Click **View details** to review the image scan results, and select **Components** to see the vulnerabilities for each component packaged in the image.
4. Select the component with the vulnerability you want to ignore, navigate to the vulnerability, and click **hide**. 4. Select the component with the vulnerability you want to ignore, navigate to the vulnerability, and click **Hide**.
![Vulnerability list](../../images/override-vulnerability-2.png){: .with-border} ![Vulnerability list](../../images/override-vulnerability-2.png){: .with-border}

View File

@ -5,31 +5,24 @@ description: Learn how to dismiss a vulnerability reported by the security
keywords: registry, security scanner keywords: registry, security scanner
--- ---
DTR scans your images for vulnerabilities but sometimes it can report that DTR scans images for vulnerabilities. At times, however, it may report image vulnerabilities that you know have been fixed, and whenever that happens the warning can be dismissed.
your image has vulnerabilities you know have been fixed. If that happens you
can dismiss the warning.
In the **DTR web interface**, navigate to the repository that has been scanned. 1. Access the DTR web interface.
![](../../images/scan-images-for-vulns-3.png){: .with-border} 2. Click **Repositories** in the left-hand menu, and locate the repository that has been scanned.
Click **View details** to review the image scan results, and
choose **Components** to see the vulnerabilities for each component packaged
in the image.
Select the component with the vulnerability you want to ignore, navigate to the ![](../../images/scan-images-for-vulns-3.png){: .with-border}
vulnerability, and click **hide**.
![Vulnerability list](../../images/override-vulnerability-2.png){: .with-border} 3. Click **View details** to review the image scan results, and select **Components** to see the vulnerabilities for each component packaged in the image.
The vulnerability is hidden system-wide and will no longer be reported as a vulnerability 4. Select the component with the vulnerability you want to ignore, navigate to the vulnerability, and click **Hide**.
on affected images with the same layer IDs or digests.
After dismissing a vulnerability, DTR will not reevaluate the promotion policies ![Vulnerability list](../../images/override-vulnerability-2.png){: .with-border}
you have set up for the repository.
If you want the promotion policy to be reevaluated for the image after hiding Once dismissed, the vulnerability is hidden system-wide and will no longer be reported as a vulnerability on affected images with the same layer IDs or digests. In addition, DTR will not reevaluate the promotion policies that have been set up for the repository.
a particular vulnerability, click **Promote**.
If after hiding a particular vulnerability you want the promotion policy for the image to be reevaluated, click **Promote**.
## Where to go next ## Where to go next

View File

@ -7,31 +7,24 @@ keywords: registry, security scanner
>{% include enterprise_label_shortform.md %} >{% include enterprise_label_shortform.md %}
DTR scans your images for vulnerabilities but sometimes it can report that DTR scans images for vulnerabilities. At times, however, it may report image vulnerabilities that you know have been fixed, and whenever that happens the warning can be dismissed.
your image has vulnerabilities you know have been fixed. If that happens you
can dismiss the warning.
In the **DTR web interface**, navigate to the repository that has been scanned. 1. Access the DTR web interface.
![](../../images/scan-images-for-vulns-3.png){: .with-border} 2. Click **Repositories** in the left-hand menu, and locate the repository that has been scanned.
Click **View details** to review the image scan results, and
choose **Components** to see the vulnerabilities for each component packaged
in the image.
Select the component with the vulnerability you want to ignore, navigate to the ![](../../images/scan-images-for-vulns-3.png){: .with-border}
vulnerability, and click **hide**.
![Vulnerability list](../../images/override-vulnerability-2.png){: .with-border} 3. Click **View details** to review the image scan results, and select **Components** to see the vulnerabilities for each component packaged in the image.
The vulnerability is hidden system-wide and will no longer be reported as a vulnerability 4. Select the component with the vulnerability you want to ignore, navigate to the vulnerability, and click **Hide**.
on affected images with the same layer IDs or digests.
After dismissing a vulnerability, DTR will not reevaluate the promotion policies ![Vulnerability list](../../images/override-vulnerability-2.png){: .with-border}
you have set up for the repository.
If you want the promotion policy to be reevaluated for the image after hiding Once dismissed, the vulnerability is hidden system-wide and will no longer be reported as a vulnerability on affected images with the same layer IDs or digests. In addition, DTR will not reevaluate the promotion policies that have been set up for the repository.
a particular vulnerability, click **Promote**.
If after hiding a particular vulnerability you want the promotion policy for the image to be reevaluated, click **Promote**.
## Where to go next ## Where to go next