Image management

devops image management widget provides intuitive navigation for releases, services and severities the image management feature within suite is pivotal for users gaining insights into the software images used within your organization's software development lifecycle this feature grants you access to pertinent data about these images, facilitating your decision making processes the image management allows you to keep track of the various components of modern software, which often includes a blend of in house developed source code and third party libraries, mainly open source ones with the rising dependence on open source libraries, security vulnerabilities and license compliance issues can arise; the image management feature helps you avoid such issues, keeping your software assets safe and secure at a macro level, the image management feature gathers crucial data about the images used in the software development lifecycle this includes the total count of unique images, the number of images with vulnerabilities, and images not scanned in the last 150 days to view the image management dashboard, you must from the top left menu button, select select build option and expand the menu select image management on this dashboard, you will be presented with an image management widget, a top 5 applications with vulnerable images and an image details table key image vulnerability management metrics the image management metrics are split into four categories overall unique images this metric includes the total count of unique images from the latest master images; even if a single technical service contains multiple images, it counts as one the percentage of these images that are open source is also displayed images with vulnerabilities this represents the number and percentage of images with vulnerabilities this metric also compares the vulnerability image percentage increase or decrease in the last 30 days concerning the previous 30 days images multiple critical/high vulnerabilities this metric represents the total number of images with multiple critical or high vulnerabilities out of the total vulnerable images images not scanned in the last 150 days displays the number of images not scanned in the last 150 days images not scanned in last 150 days once selected, images not scanned in the last 150 days section provides detailed information about the top 5 applications with vulnerable images and will also be displayed in the image details table, presenting images that have not undergone a scan in the past 150 days top 5 applications with vulnerable images the vulnerabilities by severity for the top 5 applications graph comprehensively shows the total number of vulnerabilities distributed across two severity categories critical and high this visualization supports application filtering the graph adjusts based on the selection in the application dropdown menu by default, it displays data for all applications timeline adjustment it supports a selectable timeline that defaults to the past 7 days and can be adjusted as needed release selection the graph also updates based on the selected release from the release dropdown image details table the image details table provides a detailed view of each image's vulnerabilities the table adjusts based on the selections made in two dropdowns technical service and severities it shows all applications and data from the past 7 days by default here's what each column represents image the name of the image version the version of the image technical service the technical service associated with the image application the application to which the image is linked release the release under which the image falls total vulnerabilities the total number of identified vulnerabilities critical and high the number of vulnerabilities categorized based on their severity last scanned the last date the image was scanned for vulnerabilities tools engine displays the name of the tool engine in use the image details table displays all data based on the timeframe selected all columns in this table can be sorted except the tool engine column above this table, you will find a search box that allows searching technical services by name and a settings icon that allows you to change the settings to show or hide pre selected columns additionally, an export function allows you to download a zip report of the table for offline analysis and record keeping image details view the image details view can be accessed by selecting the vertical ellipsis menu located to the far right of the image in the table and selecting view details ; this page provides a comprehensive view of the vulnerabilities associated with a specific image; you will see the image name, the version, and a vulnerability summary categorized as critical and high the table on this page gives detailed information about each vulnerability as follows package name the package associated with the image path the path to the package issue id the unique identifier for the vulnerability severity the severity level of the vulnerability description a summary of the vulnerability cvss score a numerical representation, ranging from 0 10, of the severity of a security vulnerability fixed version the version where the vulnerability has been addressed and resolved