For AI agents: the complete documentation index is available at https://docs.us.ovhcloud.com/en/llms.txt, the full documentation bundle is available at https://docs.us.ovhcloud.com/en/llms-full.txt, and this page is available as Markdown at https://docs.us.ovhcloud.com/en/public-cloud/managed-private-registry/scan-docker-images-vulnerabilities.md.
  • English

Scanning Docker Images for Vulnerabilities with OVHcloud Managed Private Registry (Harbor)

View as Markdown

Learn how to activate the vulnerabilities scanner and manually scan an image in an OVHcloud Managed Private Registry service.

OVHcloud Managed Private Registry service is a composite cloud-native registry that supports both container image management and Helm chart management.

 

Before you begin

This tutorial assumes that you already have a working OVHcloud Managed Private Registry and you have followed the guides on creating a private registry, connecting to the UI, managing users and projects and creating and using private images.

You should have at least one image in your Private Registry:

Scan docker - Scan docker images vulnerabilities - step 1

 

Instructions

Using the Harbor UI, you can scan your images on your private registry.

 

Check that you have enabled a vulnerability scanner

By default, when you create a Private Registry in order to enable a vulnerabilities scanner you need to choose a M or L plan.

Info

With the M and L plans, OVHcloud installs and maintains a vulnerability scanner for you: Trivy.

To verify if you have a vulnerability scanner in your private registry, go to Interrogation Services in the side navigation bar.

As you can see, Trivy is installed and ready to use.

If you want to manually add a vulnerability scanner, you can also do it with the New Scanner button. However, it will not be updated and maintained by OVHcloud.

Scan docker - Scan docker images vulnerabilities - step 2

 

Scan a Docker image manually

You can manually scan a Docker image. To do that, access your project, select an image, and click on Scan.

Scan docker - Scan docker images vulnerabilities - step 3

 

The scanner starts scanning the image.

Scan docker - Scan docker images vulnerabilities - step 4

 

The number of vulnerabilities is displayed.

Scan docker - Scan docker images vulnerabilities - step 5

 

When you hover over the vulnerabilities column, a chart with the vulnerabilities' severity is displayed.

Scan docker - Scan docker images vulnerabilities - step 6

 

Click on the image ID to display all vulnerabilities, ranked by severity.

Scan docker - Scan docker images vulnerabilities - step 7

 

Scan all the images

You can also scan all your images manually in your private registry.

To do that:

  1. Click Administration in the side navigation menu.
  2. Select Interrogation Services.
  3. Go to the Vulnerability tab.
  4. Click Scan Now.

Scan docker - Scan docker images vulnerabilities - step 8

 

Scan all images regularly

You can schedule a scan:

  • hourly
  • daily
  • weekly
  • when you want (enter as a cron format)

For that, select the scheduling and click on the Save button.

Scan docker - Scan docker images vulnerabilities - step 9

 

Go further

Browse all the Managed Private Registry (MPR) guides.

Browse the rest of the OVHcloud US documentation for guides on our other products and services.

Learn more about Managed Private Registry on the OVHcloud US website.