Migrate to new container scan commands

Learn how to migrate from deprecated container scan flags to the new endorctl container scan command.

With the release of endorctl container scan, the container-related flags in endorctl scan are deprecated and will be removed by the end of September 2025. Use the new dedicated command to ensure continued compatibility.

Old New
endorctl scan --container <image> --path=<project_path> endorctl container scan --image <image> --path=<project_path>
endorctl scan --container <image> --project-name=<project_name> endorctl container scan --image <image> --project-name=<project_name>
endorctl scan --container-tar <file> endorctl container scan --image-tar <file>
endorctl scan --container-as-ref endorctl container scan --as-ref

  • To scan a basic container image:

    • Old: endorctl scan --container nginx:latest --namespace my-namespace
    • New: endorctl container scan --image nginx:latest --namespace my-namespace

  • To scan a container tar file:

    • Old: endorctl scan --container-tar /path/to/image.tar --namespace my-namespace
    • New: endorctl container scan --image-tar /path/to/image.tar --namespace my-namespace

  • To scan a container with a project name:

    • Old: endorctl scan --container nginx:latest --project-name my-nginx --namespace my-namespace
    • New: endorctl container scan --image nginx:latest --project-name my-nginx --namespace my-namespace

  • To scan a container in a reference context:

    • Old: endorctl scan --container nginx:latest --container-as-ref --namespace my-namespace
    • New: endorctl container scan --image nginx:latest --as-ref --namespace my-namespace