This is unreleased documentation for Vulnerability Scanner 0.13.0-dev.

Workload Interaction

The UI extension provides cross-application interaction between its image detail pages and the Rancher workload detail pages.

  1. Select a workload image in the image list page.

    Selecting a workload image

  2. The image detail page opens.

    Image detail page

  3. Select the Workloads tab to review the workload list.

    Workloads tab of the image detail page

  4. Select a workload link to go to the workload detail page in Rancher. In the pod list, the UI extension adds a column showing the number of vulnerabilities as a stacked bar, broken down by severity.

    Hover over the bar to see a bar chart by severity. Select a severity link to open the Vulnerabilities tab with the Affecting CVEs sub-tab filtered by the selected severity. Alternatively, select View all to open the Vulnerabilities tab with the Images sub-tab, which is the default.

    Injected vulnerability column in the pod list

  5. In the Images sub-tab, the table is the same as the image list table, including the per-column filters. Select an Image reference to open the corresponding image detail page in the UI extension.

    Images sub-tab

  6. In the Affecting CVEs sub-tab, the table is the same as the vulnerability list table, including the per-column filters. Select a CVE ID to open the corresponding CVE detail page in the UI extension.

    Affecting CVEs sub-tab

From this page you can also export a vulnerability report, either as a full report or as a report limited to your current selection.