---
title: "Scanning Docker Images for Vulnerabilities with OVHcloud Managed Private Registry (Harbor)"
description: "Learn how to activate the vulnerabilities scanner and manually scan an image in an OVHcloud Managed Private Registry service."
url: https://docs.us.ovhcloud.com/en/public-cloud/managed-private-registry/scan-docker-images-vulnerabilities
lang: en
---
> For AI agents: the complete documentation index is available at https://docs.us.ovhcloud.com/en/llms.txt, the full documentation bundle is available at https://docs.us.ovhcloud.com/en/llms-full.txt.

# Scanning Docker Images for Vulnerabilities with OVHcloud Managed Private Registry (Harbor)

**Learn how to activate the vulnerabilities scanner and manually scan an image in an OVHcloud Managed Private Registry service.**

OVHcloud Managed Private Registry service is a composite cloud-native registry that supports both container image management and [Helm](https://helm.sh/) [chart](https://helm.sh/docs/topics/charts/) management.

 

## Before you begin

This tutorial assumes that you already have a working OVHcloud Managed Private Registry and you have followed the guides on [creating a private registry](https://docs.us.ovhcloud.com/en/public-cloud/managed-private-registry/create-private-registry.md), [connecting to the UI](https://docs.us.ovhcloud.com/en/public-cloud/managed-private-registry/connecting-harbor-user-interface.md), [managing users and projects](https://docs.us.ovhcloud.com/en/public-cloud/managed-private-registry/managing-users-projects-harbor.md) and [creating and using private images](https://docs.us.ovhcloud.com/en/public-cloud/managed-private-registry/create-private-image.md).

You should have at least one image in your Private Registry:

 

## Instructions

Using the Harbor UI, you can scan your images on your private registry.

 

### Check that you have enabled a vulnerability scanner

By default, when you create a Private Registry in order to enable a vulnerabilities scanner you need to choose a `M` or `L` plan.

**Note:**

With the `M` and `L` plans, OVHcloud installs and maintains a vulnerability scanner for you: [Trivy](https://aquasecurity.github.io/trivy/).

To verify if you have a vulnerability scanner in your private registry, go to `Interrogation Services` in the side navigation bar.

As you can see, Trivy is installed and ready to use.

If you want to manually add a vulnerability scanner, you can also do it with the `New Scanner` button. However, it will not be updated and maintained by OVHcloud.

 

### Scan a Docker image manually

You can manually scan a Docker image. To do that, access your project, select an image, and click on `Scan`.

 

The scanner starts scanning the image.

 

The number of vulnerabilities is displayed.

 

When you hover over the vulnerabilities column, a chart with the vulnerabilities' severity is displayed.

 

Click on the image ID to display all vulnerabilities, ranked by severity.

 

#### Scan all the images

You can also scan all your images manually in your private registry.

To do that:

1. Click `Administration` in the side navigation menu.
2. Select `Interrogation Services`.
3. Go to the `Vulnerability` tab.
4. Click `Scan Now`.

 

### Scan all images regularly

You can schedule a scan:

- hourly
- daily
- weekly
- when you want (enter as a cron format)

For that, select the scheduling and click on the `Save` button.

 

## Go further

Browse all the [Managed Private Registry (MPR) guides](https://docs.us.ovhcloud.com/en/public-cloud/managed-private-registry/landing-page-managed-private-registry.md).

Browse the rest of the [OVHcloud US documentation](https://docs.us.ovhcloud.com/en/index.md) for guides on our other products and services.

Learn more about [Managed Private Registry](https://us.ovhcloud.com/public-cloud/managed-private-registry/) on the OVHcloud US website.