Home Explore Blog Models CI



docker

4th chunk of `content/manuals/docker-hub/repos/manage/vulnerability-scanning.md`
b364dcb36a495533f81e989d42128e5909845d522584ffcb00000001000007ab


For more information on this view, see
[Image details view](/manuals/scout/explore/image-details-view.md).

### Inspect vulnerabilities

The vulnerability report sorts vulnerabilities based on their severity. It
displays information about the package that contains the vulnerability, the
version in which it was introduced, and whether the vulnerability has been fixed
in a later version.

The vulnerability scan report also allows development teams and security leads
to compare the vulnerability counts across tags to see whether the
vulnerabilities are decreasing or increasing over time.

### Fix vulnerabilities

Once a list of vulnerabilities have been identified, there are a couple of
actions you can take to remediate the vulnerabilities. For example, you can:

1. Specify an updated base image in the Dockerfile, check your application-level
   dependencies, rebuild the Docker image, and then push the new image to Docker
   Hub.
2. Rebuild the Docker image, run an update command on the OS packages, and push
   a newer version of image to Docker Hub.
3. Edit the Dockerfile to manually remove or update specific libraries that
   contain vulnerabilities, rebuild the image, and push the new image to Docker
   Hub

Docker Scout can provide you with concrete and contextual remediation steps for
improving image security. For more information, see
[Docker Scout](/manuals/scout/_index.md).

### Turn off static vulnerability scanning

Repository owners and administrators can disable static vulnerability scanning
on a repository. To disable scanning:

1. Sign in to [Docker Hub](https://hub.docker.com).
2. Select **My Hub** > **Repositories**.

   A list of your repositories appears.

3. Select a repository.

   The **General** page for the repository appears.

4. Select the **Settings** tab.
5. Under **Image security insight settings**, select **None**.
6. Select **Save**.

Title: Inspecting and Fixing Vulnerabilities in Docker Images
Summary
This section describes how to inspect vulnerabilities in Docker images using the vulnerability report. The report sorts vulnerabilities by severity and provides information about the package, version, and fix status. It also explains how to fix vulnerabilities by updating base images, dependencies, or specific libraries, and recommends using Docker Scout for remediation steps. Additionally, it provides instructions on how to disable static vulnerability scanning for a repository.