- Operator images, primarily composed of YAML files, lack recognizable OS or package layers for Clair to scan. Clair returns an empty result, leading to inaccurate statuses such as "queued" or "unsupported" in the Quay UI. This creates confusion for users regarding the scan results of these images.
- Proposed Solutions:
- Implement logic to identify operator images during scanning. Account for valid images that do not contain typical OS or packages.
Display clearer and more specific messages in the UI:
"Scanned: No vulnerabilities detected or no recognizable packages/OS."
"Unsupported: Unable to scan due to lack of compatibility or structure." - Ensure that valid operator images are not shown as "queued" indefinitely.
- Address inaccurate status display for operator images in Quay UI by improving logic
- is related to
-
PROJQUAY-8351 Vormetric Images Stuck in Queued Status on Quay.io for Over 2 Days
-
- Closed
-