Remove vulnerable container images

SYNOPSIS

Remove container images with known vulnerabilities.

DESCRIPTION

When Microsoft Defender for container registries is enabled, Microsoft Defender scans container images. Container images are scanned for known vulnerabilities and marked as healthy or unhealthy. Vulnerable container images should not be used.

RECOMMENDATION

Consider using removing container images with known vulnerabilities.

NOTES

This rule applies when analyzing resources deployed (in-flight) to Azure.

LINKS

• SE:02 Secured development lifecycle
• Introduction to Azure Defender for container registries
• Overview of Microsoft Defender for Containers
• Secure the images and run time