Configure Vulnerability Scanning

Software development is constantly evolving, and security is a top priority. The Vulnerability Scanning feature is specifically designed to enhance the security of your containerized applications by proactively identifying potential vulnerabilities present in your artifacts. Scans take place every time an artifact is pushed to the Private Container Registry and when new vulnerability definitions are published. This allows for quick detection of any security weaknesses in container dependencies and libraries, allowing you to react immediately to prevent exploitation.

Adopting the scanning feature is not just about maintaining security; it is also essential for complying with industry regulations, managing risks effectively, and sustaining the trust of your users. You can integrate the feature into your CI/CD pipeline, providing continuous security assessments to keep your containers safe in a fast-paced development environment.

We prioritize detected vulnerabilities based on severity, enabling you to focus on the most critical issues. Our recommendations for patch management, minimizing the attack surface, and using trusted base artifacts form part of a comprehensive security posture. By adopting the Vulnerability Scanning feature, you are taking a proactive approach to enable your team to safeguard your applications against emerging threats, ensuring the integrity of your software delivery.

For more information, see View Vulnerability Scan Results.

Important:

• Our price list provides comprehensive details about the costs associated with our various products and services. IONOS CLOUD offers an enhanced add-on service, which operates on a pay-as-you-go model similar to our basic Private Container Registry. This means that the cost will scale according to your usage, providing you with the flexibility to control your expenses. For more information, see the price list.
• While we strive to provide accurate and up-to-date vulnerability information, it's important to note that the scanning results are contingent on the contents of third-party, market-leading vulnerability database(s). IONOS CLOUD is not responsible for any missing definitions or inaccuracies in the database.

Add Vulnerability Scanning to an existing Private Container Registry

To add Vulnerability Scanning to a Private Container Registry:

1. In the DCD, go to Menu > Containers > Container Registry.

2. Select a Private Container Registry from the Container Registry window to enable vulnerability scanning.

3. In the Properties tab, select Enable Vulnerability Scanning.

Enable Vulnerability Scanning

4. Select Enable to confirm.

Confirm Enabling Vulnerability Scanning