Managing SWR Private Images

Constraints

• Only the HSS container edition supports this function.

• Security scans can be performed only on Linux images.

Viewing Private Images

1. Log in to the management console.
2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
3. In the navigation pane, choose Asset Management Container & Quota. On the displayed page.
4. You can click Update Private Images from SWR to update self-owned images from SWR.

Scanning a Private Image

You can choose all images, multiple images, or a single image and manually start a scan. The duration of a security scan depends on the scanned image size. Generally, scanning an image takes shorter than 3 minutes. After the scan is complete, click View Report to check the report.

Scan items of private images in SWR are as follows:

1. Log in to the management console and go to the HSS page.
2. In the navigation pane, choose Asset Management > Containers & Quota.
3. Click the Container Images tab and select SWR private image. In the Operation column of an image, click Scan.
4. In the displayed dialog box, click OK to start the scan job.
5. Scanned in the Scan Status column indicates the target image scan completed.

Viewing the Malicious File Report of a Private Image

After images are scanned, you can view malicious files on them. This section describes how to view malicious files in an image version.

1. Log in to the management console and go to the HSS page.
2. In the navigation pane, choose Asset Management > Containers & Quota.
3. Click the Container Images tab and select SWR private image. In the Operation column of an image, click View Report.
4. Click Malicious Files to view malicious files on the image.

Viewing Software Information About a Private Image

1. Log in to the management console and go to the HSS page.
2. In the navigation pane, choose Asset Management > Containers & Quota.
3. Click the Container Images tab and select SWR private image. In the Operation column of an image, click View Report.
4. Click Software Information to view the software contained in the image version, software type, and number of vulnerabilities in the software.
5. Click next to a software name to view the software vulnerability name, repair urgency, and solution.

Viewing File Information About a Private Image

1. Log in to the management console and go to the HSS page.
2. In the navigation pane, choose Asset Management > Containers & Quota.
3. Click the Container Images tab and select SWR private image. In the Operation column of an image, click View Report.
4. Click File Information to view the file information about the image.

   Including the number of files, total file size, and details about the top 50 files.

Viewing the Unsafe Settings of a Private Image

1. Log in to the management console and go to the HSS page.
2. In the navigation pane, choose Asset Management > Containers & Quota.
3. Click the Container Images tab and select SWR private image. In the Operation column of an image, click View Report.
4. Select Unsafe Settings to view the baseline check report.

   You can view the unsafe configurations, password complexity policy detection, and common weak password detection results of the target image.

   • Viewing unsafe configurations and modification suggestions
     1. On the Unsafe Configurations tab page, select the target baseline.
     2. In the detection item column of the target detection item, click Description to view the detection item description and modification suggestions.
   • Common weak password detection
     1. Click Common Weak Password Detection.
     2. Configure weak passwords and click OK.

Viewing the Sensitive Information Report of a Private Image

1. Log in to the management console and go to the HSS page.
2. In the navigation pane, choose Asset Management > Containers & Quota.
3. Click the Container Images tab and select SWR private image. In the Operation column of an image, click View Report.
4. Click the Sensitive Information tab to view details about sensitive image information and ignore risk alarms.
5. Click Configure Sensitive File Path to view and edit the custom file path whitelist.

   Table 1 Custom path description

   Path Specification Item	Description	Example Value
   OS	Only Linux is supported.	-
   Requirement	A maximum of 20 paths can be specified. One path occupies one line.	/usr/ /lib/test.txt
   Default whitelist path	The following whitelist directories or file formats are supported by default and do not need to be configured: /usr/* /lib/* /lib32/* /bin/* /sbin/* /var/lib/* /var/log/* */node_modules/*/*.md */node_modules/*/test/* */service/iam/examples_test.go */grafana/public/build/*.js	-
   Non-scanning scenario	The file size is greater than 20 MB. The following file types are not scanned: Common binary files Common program files Automatically generated files	jpg|png|gif|mov|avi|mpeg|pdf|mp4|mp3|svg|tar|gz|zip js|jar|java||md|cpp|cxx|scala|pl [0-9a-zA-Z_-]{32,64}

Viewing the Software Compliance Report About a Private Image

1. Log in to the management console and go to the HSS page.

2. In the navigation pane, choose Asset Management > Containers & Quota.
3. Click the Container Images tab and click SWR private image.
4. In the Operation column of the target image, click View Report. The security scan report page is displayed.
5. Choose Software Compliance to view the report.

   You can view the name, path, and image layer of non-compliant software.

Viewing the Base Image Report of a Private Image

1. Log in to the management console and go to the HSS page.

2. In the navigation pane, choose Asset Management > Containers & Quota.
3. Click the Container Images tab and click SWR private image.
4. In the Operation column of the target image, click View Report. The security scan report page is displayed.
5. Click the Base Images tab and view reports.

   You can view the name, version, and image layer path of a service image that is not created using a base image.