> ## Documentation Index
> Fetch the complete documentation index at: https://docs.endorlabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Container inventory

> Learn how to view, filter, and analyze container images in the Endor Labs platform.

<Badge color="green">Beta</Badge>

Container inventory provides a centralized view of all container images across your namespace, including shared base images and application images. It helps you track where the images are used, understand relationships between them, and identify potential risk exposure.

Container findings are security vulnerabilities, compliance issues, and risk assessments identified during container scans. These findings provide detailed insights into the security posture of your containerized applications, including vulnerabilities in base images, application dependencies, and configuration issues.

Understanding and analyzing these findings is crucial for maintaining secure container deployments and ensuring compliance with organizational security policies.

## View containers in your namespace

To view all containers across your namespace:

1. Select **Containers** from the left sidebar.

2. You can view a list of container images.

   You can view the following information for each container image:

   * **Unique versions**: The number of distinct versions of the image that were scanned.
   * **Unique projects**: The number of projects that use the image.
   * **Classification**: The classification of the image, such as `app`, `base`, or `unclassified`.

   <img src="https://mintcdn.com/endorlabs-b4795f4f/Uc3T4mPoaFbRUPbf/images/scan/containers/container-findings/containers-ui.webp?fit=max&auto=format&n=Uc3T4mPoaFbRUPbf&q=85&s=b91ac2a97fe31fb0d2f79bed4c98ed5d" alt="Container inventory on the CONTAINERS tab" style={{ width: '85%' }} width="1660" height="1156" data-path="images/scan/containers/container-findings/containers-ui.webp" />

3. Use the search bar to find specific container images by name.

   You can use the preset filters to limit which container images are listed. See [Filter containers](#filter-containers) for the full set of options.

4. Click a container image to expand it and view each scanned **Version** of that image.

   Each row shows the following information about the container image version:

   * **Version**: The image tag or digest for the version, such as `latest`.
   * **Container Reachability**: The profiling status and the reachability result for the version.
   * **Project**: The project associated with the version.
   * **Findings**: The number of vulnerabilities found in the container version.
   * **Last scanned**: The time when the version was last scanned.

   <img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-expanded.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=932cc8cb3d0598d19b444e301607bc59" alt="Expanded container image with version rows" style={{ width: '85%' }} width="2252" height="936" data-path="images/scan/containers/container-findings/containers-expanded.webp" />

5. Click on the three vertical dots to **View Layers** or **View Derived Images**.

### Filter containers

Filtering containers helps you to narrow down the results to find specific container images based on your criteria.

You can filter the containers by using the default filter options.

* **Tags**: Filter by container image tags.
* **Base Image Name**: Filter by the underlying base image name.
* **Project**: Filter by the project associated with the version.
* **Last Scanned**: Filter by last scanned time. By default, last 90 days is applied.
* **Distribution**: Filter by the operating system distribution.
* Toggle **Advanced** and search for containers using advanced filters.

### View container details overview

Select a container row to view the container details overview on the right sidebar.

You can view the following information about the container.

* The **Overview** displays key dependency and finding counts with reachability and severity breakdowns, along with visibility, OSS usage, scopes, dependents, and version metadata.

  <img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-details-overview.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=3affb6d3741d836788fb8c96e385e2b7" alt="Container details overview" style={{ width: '60%' }} width="1062" height="1266" data-path="images/scan/containers/container-findings/containers-details-overview.webp" />

* The **Reachability Analysis** summarizes profiling status and details such as application type, profile type, image classification, run duration, and entry point package when available.

  <img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-details-reachability.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=d6635c2528e25519773f21b8c3b3e24b" alt="Container reachability analysis" style={{ width: '60%' }} width="1064" height="944" data-path="images/scan/containers/container-findings/containers-details-reachability.webp" />

Select **View Details** to open the full version view. See [View container details for a version](#view-container-details-of-the-selected-version) for more information.

### View container details of the selected version

Select a container version from the list of containers to view the details of the container version.

#### View detailed findings

You can view the findings associated with the container image under **Findings**. Each finding displays the reachability status of its dependency as an attribute label.

To view and filter dependencies based on the container images, click **Container Layers** and select to view **All Layers**, **Base Image Layers Only**, or **Application Layers Only**.

<img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-findings-layers.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=4137c19eb22a5da1b31efbadf4a26249" alt="Container Findings with Container Layers options" style={{ width: '80%' }} width="2146" height="1240" data-path="images/scan/containers/container-findings/containers-findings-layers.webp" />

You can expand the finding to view detailed information, including a summary of the issue, when it was first introduced, and remediation guidance.

You can manage the finding using the available options:

* **Add Exception**: Add an exception to exclude this finding from future scans for accepted or mitigated vulnerabilities.
* **More Details**: Access additional information about the vulnerability, including detailed technical descriptions and remediation steps.

#### View container version overview

Select **Overview** to view the summary of the selected container version.

You can view the finding risk matrix and metadata such as dependencies, visibility, scopes, and package version details.

<img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-overview.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=3d4b19125dec8b645a7290340812f1c3" alt="Container version Overview tab" style={{ width: '80%' }} width="2144" height="984" data-path="images/scan/containers/container-findings/containers-overview.webp" />

#### View dependent projects

Select **Dependents** to view the projects that depend on the selected container version.

Each entry shows finding counts, origin of findings, project origin, last scanned time, and container reachability status.

<img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-view-dependents.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=f9cfabfbf12e22dcccbf40d18d7b2f99" alt="Dependents for the selected container version" style={{ width: '80%' }} width="2286" height="570" data-path="images/scan/containers/container-findings/containers-view-dependents.webp" />

#### View dependencies of the selected container version

Select **Dependencies** to view the dependencies of the selected container version.

Each entry shows the dependency and requested version, its type, reachability status, visibility, and whether source code is available.

<img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-details-dependencies.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=dc10c57b6a8fdfd07c07a665f16fba0f" alt="Dependencies for the selected container version" style={{ width: '80%' }} width="2146" height="1106" data-path="images/scan/containers/container-findings/containers-details-dependencies.webp" />

#### View dependency graph

Select **Dependency Graph** to view the dependency graph of the selected container version.

<img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-dependency-graph.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=4ab80ec058330607f3ba527ccd015373" alt="Dependency graph for a container version" style={{ width: '80%' }} width="2152" height="1290" data-path="images/scan/containers/container-findings/containers-dependency-graph.webp" />

#### View container layers

Select **Container Layers** to view multiple layers numbered sequentially, where each number represents the order in which Docker commands were executed. Click on a layer to view the Docker command and findings associated with that specific layer.

<img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-layers.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=a3064b0d4bc77d1a7c85c1634f3d59c8" alt="Container layers and Dockerfile steps" style={{ width: '80%' }} width="2146" height="852" data-path="images/scan/containers/container-findings/containers-layers.webp" />

#### View scan history

Select **Scan History** to see past scan runs for the container. This shows when the container was last scanned, previous scan results, and any changes in findings over time. You can compare different scan runs to track improvements or identify when new vulnerabilities were introduced.

<img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-scan-history.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=3179f9e4c6eee55e8de2c504ce8cac81" alt="Scan history for a container version" style={{ width: '80%' }} width="2146" height="644" data-path="images/scan/containers/container-findings/containers-scan-history.webp" />

## View container findings in a project

To view findings from the container scan:

1. Select **Projects** from the left sidebar.

2. Select the project for which you want to view the container findings.

3. Select **Containers** from the preset filters.

   <img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/containers-findings-layers.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=4137c19eb22a5da1b31efbadf4a26249" alt="Project container on the Findings tab" style={{ width: '80%' }} width="2146" height="1240" data-path="images/scan/containers/container-findings/containers-findings-layers.webp" />

4. To view and filter dependencies based on the container images, select **Container Layers** and choose to view **All Layers**, **Base Image Layers Only**, or **Application Layers Only**.

## View findings in your namespace

To view all container findings across your namespace, go to **Findings** from the left sidebar and select **Containers** from the preset filters. This shows all container related vulnerabilities and security issues across your entire organization. You can search findings using basic filters or advanced filters to narrow down the results based on your specific criteria.

<img src="https://mintcdn.com/endorlabs-b4795f4f/rtiT4oc3TglKX_HY/images/scan/containers/container-findings/findings-containers.webp?fit=max&auto=format&n=rtiT4oc3TglKX_HY&q=85&s=7a908b475ebfb40ea747f99de09d5655" alt="Findings with the Containers preset filter" style={{ width: '85%' }} width="2684" height="912" data-path="images/scan/containers/container-findings/findings-containers.webp" />
