Share via

How to prevent Cloud Defender from scanning deleted container images

Jerry 0 Reputation points
2024-02-05T04:34:57.91+00:00

Hi, I have deleted some images in a repository of a container registry. However the Cloud defender keep scanning those deleted images and create vulnerables reports. Is there any setting for the container to stop this?

Azure Container Registry
Azure Container Registry
An Azure service that provides a registry of Docker and Open Container Initiative images.
508 questions
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. vipullag-MSFT 26,487 Reputation points Moderator
    2024-02-05T06:05:10.1266667+00:00

    Hello Jerry

    Welcome to Microsoft Q&A Platform, thanks for posting your query here.

    Microsoft Defender for Container Registries automatically scans every image pushed to your registry, and it also scans any image that has been pulled within the last 30 days. However, it should not be scanning deleted images. If you are still receiving vulnerability reports for deleted images, it is possible that the images are still present in your registry and have not been fully deleted.

    To confirm if the images are still present, you can use the Azure CLI to list the images in your registry. If the images are still present, you can delete them using the Azure CLI or Azure portal. Once the images are fully deleted, Microsoft Defender for Container Registries should stop scanning them.

    If you still are facing the issue, then we need support team to investigate this further.

    Hope this helps.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.