Docker Scout Platform Release Notes: Q2-Q4 2024

--- title: Docker Scout release notes linkTitle: Platform release notes description: Learn about the latest features of Docker Scout keywords: docker scout, release notes, changelog, features, changes, delta, new, releases aliases: - /scout/release-notes/ tags: [Release notes] ---  This page contains information about the new features, improvements, known issues, and bug fixes in Docker Scout releases. These release notes cover the Docker Scout platform, including the Dashboard. For CLI release notes, refer to [Docker Scout CLI release notes](./cli.md). ## Q4 2024 New features and enhancements released in the fourth quarter of 2024. ### 2024-10-09 Policy Evaluation has graduated form Early Access to General Availability. Docker Scout Dashboard UI changes: - On the Docker Scout Dashboard, selecting a policy card now opens the policy details page instead of the policy results page. - The policy results page and the policy details side panel are now read-only. Policy actions (edit, disable, delete) are now accessible from the policy details page. ## Q3 2024 New features and enhancements released in the third quarter of 2024. ### 2024-09-30 In this release, we've changed how custom policies work. Before, custom policies were created by copying an out-of-the-box policy. Now, you can customize policies either by editing the default policy from a **policy type** which acts as a template. The default policies in Docker Scout are also implemented based on these types. For more information, refer to [policy types](/manuals/scout/policy/_index.md#policy-types). ### 2024-09-09 This release changes how [health scores](/manuals/scout/policy/scores.md) are calculated in Docker Scout. The health score calculation now considers optional and custom policies that you have configured for your organization. This means that if you have enabled, disabled, or customized any of the default policies, Docker Scout will now take those policies into account when calculating the health score for your organization's images. If you haven't yet enabled Docker Scout for your organization, the health score calculation will be based on the out-of-the-box policies. ### 2024-08-13 This release changes the out-of-the-box policies to align with the policy configurations used to evaluate Docker Scout [health scores](/manuals/scout/policy/scores.md). The default out-of-the-box policies are now: - **No high-profile vulnerabilities** - **No fixable critical or high vulnerabilities** - **Approved Base Images** - **Default non-root user** - **Supply chain attestations** - **Up-to-Date Base Images** - **No AGPL v3 licenses** The configurations for these policies are now the same as the configurations used to calculate health scores. Previously, the out-of-the-box policies had different configurations than the health score policies. ## Q2 2024 New features and enhancements released in the second quarter of 2024. ### 2024-06-27 This release introduces initial support for **Exceptions** in the Docker Scout Dashboard. Exceptions let you suppress vulnerabilities found in your images (false positives), using VEX documents. Attach VEX documents to images as attestations, or embed them on image filesystems, and Docker Scout will automatically detect and incorporate the VEX statements into the image analysis results. The new [Exceptions page](https://scout.docker.com/reports/vex/) lists all exceptions affecting images in your organization. You can also go to the image view in the Docker Scout Dashboard to see all exceptions that apply to a given image. For more information, see [Manage vulnerability exceptions](/manuals/scout/explore/exceptions.md). ### 2024-05-06 New HTTP endpoint that lets you scrape data from Docker Scout with Prometheus, to create your own vulnerability and policy dashboards with Grafana. For more information, see [Docker Scout metrics exporter](/manuals/scout/explore/metrics-exporter.md). ## Q1 2024

This document provides release notes for the Docker Scout platform from Q2 2024 to Q4 2024, detailing new features, enhancements, and changes. Key highlights include the general availability of Policy Evaluation, changes to custom policy creation, updates to health score calculations, alignment of out-of-the-box policies with health scores, introduction of vulnerability Exceptions via VEX documents, and a new HTTP endpoint for Prometheus integration.