Access Docker image security scans in the Aptible Dashboard by navigating to the respective app and selecting “Security Scan.”

Ubuntu, Debian, RHEL, Oracle, Alpine, and AWS Linux are currently supported.

Some operating systems, like CentOS, are not supported because the OS maintainers do not publish any kind of security database of package vulnerabilities. You will see an error message like “No OS detected by Clair” if this is the case.

In the best case, this means that Aptible was able to identify packages installed in your container, and none of those packages have any “known” vulnerabilities.

In the worst case, Aptible is unable to correlate any vulnerabilities to packages in your container.

Vulnerability detection relies on your OS maintainers to publicly publish vulnerability information and keep it up to date. The most common reason for there being no vulnerabilities detected is if you’re using an unsupported (e.g., End of Life) OS version, like Debian 9 or older, for which there is no longer any publicly maintained vulnerability database.

Read the guide