mirror of
https://github.com/docker/docs.git
synced 2026-03-29 23:38:56 +07:00
Merge pull request #17479 from docker/chrisward/scout-data-flow
Add Docker Scout data flow details
This commit is contained in:
@@ -18,6 +18,10 @@ or for a specific base image or layer.
|
||||
|
||||
{:width="700px"}
|
||||
|
||||
Docker Desktop first analyzes images locally, where it generates a software bill of materials (SBOM).
|
||||
Docker Desktop, Docker Hub, and the Docker Scout Dashboard and CLI all use the [package URL (PURL) links](https://github.com/package-url/purl-spec){: target="_blank" rel="noopener" }
|
||||
in this SBOM to query for matching Common Vulnerabilities and Exposures (CVEs) in [Docker Scout's advisory database](./advisory-db-sources.md).
|
||||
|
||||
## Image hierarchy
|
||||
|
||||
The image you inspect may have one or more base images represented under **Image hierarchy**.
|
||||
|
||||
Reference in New Issue
Block a user