Skip to content

jf docker scan supporting IMAGE ID or not ? #540

@rcarre

Description

@rcarre

Describe the bug

Placing jf docker scan command line with either image:tag or related IMAGE ID argument does not give the same result.

I do agree that related Jfrog doc only reference command line with image:tag arg ... but what about the support of IMAGE ID format ? Thx

Current behavior

According to my tests, using IMAGE ID always returns No security violations were found albeit the Docker image actually includes many critical CVEs

Reproduction steps

No response

Expected behavior

No response

JFrog CLI version

jf version 2.78.3

Operating system type and version

Ubuntu 24.04.3 LTS

JFrog Artifactory version

No response

JFrog Xray version

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions