---
description: Advanced image analysis is a Docker Scout feature for Docker Hub
keywords: scanning, vulnerabilities, Hub, supply chain, security
title: Advanced image analysis
---

{% include scout-early-access.md %}

Advanced image analysis is a Docker Scout feature for Docker Hub.

When you activate Advanced image analysis for a repository, Scout analyzes new tags
automatically when you push to that repository. Advanced image analysis
is more than point-in-time scanning, the analysis gets reevaluated
continuously, meaning you don't need to re-scan the image to see an updated
vulnerability report. 

The **General** tab of an image page on Docker Hub shows a summary of common vulnerabilities and
exposures (CVEs) for the image in the **Tags** section. The **Tags** tab shows all analysis results.

The **Images** section of Docker Desktop shows an overview of CVEs for an image and the details view shows all vulnerabilities.

## Activate Advanced image analysis

Advanced image analysis is an early access feature and activated on a
per-repository basis for organizations with a
[Docker Pro, Team, or Business subscription](../subscription/index.md).

> **Note**
>
> Only repository owners and administrators can activate Advanced image analysis
> on a repository.

To activate Advanced image analysis:

1. Log into your Docker Hub account.
2. Click **Repositories** from the main menu and select a repository from the
   list.
3. Go to the **Settings** tab
4. Under **Image insight settings**, select **Advanced image analysis provided
   by Docker Scout**.
5. Select **Save**.

> **Tip**
>
> You can enable Advanced image analysis on repositories in bulk from
> [the Docker Scout Dashboard settings](./dashboard.md#repository-settings).
{: .tip }

## Analyze an image

To trigger Advanced image analysis, push an image to a Docker Hub repository
with Advanced image analysis active:

1. Sign in with your Docker ID, either using the `docker login` command or the
   **Sign in** button in Docker Desktop.
2. Tag the image to analyze. For example, to tag a Redis image, run:

   ```console
   $ docker tag redis <org>/<imagename>:latest
   ```

3. Push the image to Docker Hub to trigger analysis of the image:

   ```console
   $ docker push <org>/<imagename>:latest
   ```

## View the vulnerability report

To view the vulnerability report on Docker Hub:

1. Go to Docker Hub and open the repository page. The **Tags** section
   displays a vulnerability summary.

   It may take a few minutes for the vulnerability report to appear. If your vulnerability summary doesn't display, wait a moment
   and then refresh the page.

2. Click on the tag in the table. This opens the details page for the tag.

3. Select the **Vulnerabilities** tab on the right side of the page.

   This tab displays a deep-dive view of the image's packages and any known vulnerabilities.

   For more information about how to interpret the vulnerability report, see
   [Image details view](./image-details-view.md).

Expanding any of the packages in the list shows you more information about the
vulnerabilities that affect a given package. Expanding the vulnerability shows a summary of it's details and
selecting the vulnerability name opens Docker's image vulnerability database, which provides
more information on the vulnerability and what images it affects.

## Deactivate Advanced image analysis

> **Note**
>
> Only repository owners and administrators can deactivate Advanced image
> analysis on a repository.

To deactivate Advanced image analysis:

1. Go to Docker Hub and sign in.
2. Select **Repositories** from the main menu and select a repository from the
   list.
3. Go to the **Settings** tab.
4. Under **Image insight settings**, select one of the following options:

   - **Basic Hub vulnerability scanning** to use the basic scanning feature.
   - **None** to turn off vulnerability detection.

5. Select **Save**.

## Feedback

Thank you for trying out the Advanced image analysis feature. Give feedback or
report any bugs you may find through the issues tracker on the
[hub-feedback](https://github.com/docker/hub-feedback/issues){: target="_blank"
rel="noopener" class="_"} GitHub repository.