Prisma detecting CVEs when pulled but not during scan job in CI

connor_verlekar — Tue, 08 Feb 2022 00:02:16 GMT

So, I'm basically pulling the base images of the certain OS, and hardening them to reload onto another registry. When I pull the image and harden and push, under CI Scans of (Gitlab) of my pipeline. I don't get any CVEs. But when I pull the same image which I pushed to the last registry and run the ci scan with only a docker file which contains only

`FROM (hardened-image)` I'm getting vulnerabilities, I do not understand what is happening and why it is happening, can someone help me?

Re: Prisma detecting CVEs when pulled but not during scan job in CI

david_michael — Wed, 12 Jan 2022 23:12:07 GMT

Could you be running into a tagging issue? Are you pushing hardened-image:$build-id and then pulling latest? Curious to know what you found out or how you resolved this!

topic Re: Prisma detecting CVEs when pulled but not during scan job in CI in Prisma Cloud Discussions

Prisma detecting CVEs when pulled but not during scan job in CI

Re: Prisma detecting CVEs when pulled but not during scan job in CI