Azure Advisor shows vulnerabilities in non existing container images

Question

I have Azure Advisor turned on and it reports vulnerabilities in the container images under Security using [Preview] "Container images in Azure registry should have vulnerability findings resolved" recommendation. For some reason when I select the affected resource it points to the image that is no longer in the registry. According to the documentation https://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-vulnerability-assessment-azure#if-i-remove-an-image-from-my-registry-how-long-before-vulnerabilities-reports-on-that-image-would-be-removed the notification can persist up to 3 days after deletion but that image has been deleted earlier than these 3 days. Can I somehow refresh it or how to update this recommendation?

Answer 1

@Nowak, Wawrzyniec Thank you for reaching out to us, would recommend to check/list all the digests in the registry to confirm container image is not present.

You can run the commands mentioned here - https://learn.microsoft.com/en-us/azure/container-registry/container-registry-get-started-azure-cli#:~:text=List%20container%20images to list the repositories in your registry.

if its confirmed its not present, would recommend to work with our support team to investigate this further where we might need help from our engineering team as well.

Do you have the support contract with us to create a support ticket ?