Description:

This is an issue found in Quay 3.10, when deploy Quay 3.10 with managed Clair, after push openjdk image, found can't report all expected High image vulnerability.

The results is scanned by Docker Hub built in security scanned, report totally 47 High Image vulnerability, but Clair only report 10 High Image vulnerability. Pls review this issue.

Docker Image:

https://hub.docker.com/layers/library/openjdk/22-jdk/images/sha256-3e90ad244aa3cbcd90c623fda8c8e4a058d46703ea8bfe290a312440177d94c2?context=explore 

Quay: quay-operator-bundle-container-v3.10.0-144

Clair: 4.7.2