Skip to main content

Scan your running containers for vulnerabilities

So now you know that you can scan images when pushed to Harbor. But what if you have long running versions of containers? When new vulnerabilities are identified after you scanned the image, you wil only see them when you update your image. For this scenario, Otomi offers a realtime container scanning tool called KubeClarity. At any point in time you can scan your running containers for vulnerabilities.

info

KubeClarity is NOT configured for multi-tenancy. This means everyone can scan any container running on the platform.

Scan running containers​

In the apps section in Otomi console, you'll see an app called KubeClarity. Click on it.

kubecfg

  • In the right menu, click on Runtime Scan
  • Select your team's namespace for the scan to target
  • Click Start Scan

When the scan is completed, you'll see

kubecfg