Artifact Analyzer

Analyzer: Artifact

The Artifact Analyzer specializes in analyzing container images and their security posture across your software delivery pipeline. This analyzer helps Security Operations (SecOps) and IT Operations (ITOps) teams identify, assess, and remediate security risks in container artifacts, ensuring secure and compliant containerized applications.

Sightline: Container Overview

The Container Overview sightline provides comprehensive visibility into container security, helping identify vulnerabilities in containerized applications and highlighting the riskiest containers for prioritized action.

Widgets:

• Repositories with Containers

• Containers with Vulnerabilities

• Critical Vulnerabilities

• High Severity Vulnerabilities

• Medium Severity Vulnerabilities

• Top 10 Riskiest Containers Through Packages

• Container Image Overview

• Container Vulnerability Counts by Severity

Sightline: Container Impact Analysis

The Container Impact Analysis sightline helps assess the impact of vulnerabilities in container images and guides decision-making for containerized environments.

Widgets:

• List of vulnerable container image names

Sightline: Container Vulnerabilities Trend Analysis

The Container Vulnerabilities Trend Analysis sightline monitors trends in container vulnerabilities, enabling proactive risk mitigation for containerized applications.

Widgets:

• Total Vulnerabilities

• Critical Vulnerabilities

• High Vulnerabilities

• Total Container Vulnerability Count

• High Container Vulnerability Count

• Critical Container Vulnerability Count

Sightline: Vulnerability Impact Analysis

The Vulnerability Impact Analysis sightline provides detailed assessment of how specific vulnerabilities affect your containerized environment, helping prioritize remediation efforts based on business impact and exploit risk.

Widgets:

• Vulnerable dependency (CVE) in container from Operating System

• Vulnerable dependency (CVE) in container from User Code

• Vulnerable dependency (CVE) in container from Base Image

• Container Security Misconfigurations

• Vulnerability Impact Analysis

Sightline: PII and Secret Detection

The PII and Secret Detection sightline provides visibility into sensitive data exposure risks within container images, helping identify and remediate potential data leakage and security vulnerabilities from embedded secrets and personally identifiable information.

Widgets:

• Secrets Discovered in Container Images

• PII Discovered in Container Images

• PII Types in Container Images

Alerts

Container Critical Vulnerability

The Container Critical Vulnerability alert notifies about critical vulnerabilities detected in containers, enabling swift action to address critical security risks.

Container High Vulnerability

The Container High Vulnerability alert provides insights into high-severity container vulnerabilities, supporting proactive risk management and securing container environments.

Container Medium Vulnerability

The Container Medium Vulnerability alert highlights medium-severity vulnerabilities in containers, helping teams prioritize and address moderate security risks effectively.

Container Low Vulnerability

The Container Low Vulnerability alert identifies low-severity vulnerabilities in containers, ensuring comprehensive visibility and supporting long-term security improvements.

Vulnerable dependency (CVE) in container from Operating System

The Vulnerable dependency (CVE) in container from Operating System alert identifies security vulnerabilities originating from OS-level packages within containers. This alert helps teams detect and remediate base operating system vulnerabilities that could compromise container security, enabling targeted patching of foundational components.

Container Security Misconfigurations

The Container Security Misconfigurations alert identifies security configuration issues in container images and their associated Dockerfiles. This alert helps teams detect and remediate misconfigurations that could lead to container vulnerabilities, including privilege escalation risks, exposed ports, and insecure defaults. By addressing these configuration issues early, teams can maintain a strong security posture for their containerized applications.