Fixing Vulnerability
1. Log in to the CSG Console.
2. On the left navigation bar, select Image security > Image management to go to the Image management page.
3. Select the registry image or node image tab to go to the corresponding image list page.
4. Click image name in the image list to go to the details page.
5. At the bottom of the summary tab on the details page, you can view the security advice for the vulnerability. This part provides suggestions for fixing vulnerabilities and handling exception files, including specific solutions and code.
6. Click the"Export" icon on the right side of the security advice to download the security suggestions locally. This facilitates your modification and use.
Adding to the Trustlist
1. Log in to the CSG Console.
2. On the left navigation bar, select Image security > Image management to go to the Image management page.
3. Select the registry image or node image tab to go to the corresponding image list page.
4. Click"Join the whitelist" in the image list operation column to go to the Join the whitelist page.
5. Enter the name of the trustlist, select which nodes and repositories to apply to, and comment on the description information.
6. Click"save" to add the image to the trustlist. Then, no alarm is generated when this image is scanned in the corresponding node and repository.
Setting as a Base Image
1. Log in to the CSG Console.
2. On the left navigation bar, select Image security > Image management to go to the Image management page.
3. Select the registry image tab to go to the image list page.
4. Click"set as base image" in the image list operation column. The system will prompt that the operation is successful.
5. After you set an image as the base image, you need to re-scan the image.
6. After the scanning is complete, check base image at the top of the list to see all base images configured in the current repository or project.