Compliance Scan
Qualys Container Security evaluates each scanned containers and images against a library of CIS Docker Benchmark-based compliance controls and reports a compliance posture for it.
Compliance posture is evaluated using the data collected during a scan of the containers and images by the Qualys Container Sensor. The Qualys Enterprise TruRisk™ Platform evaluates this data against the control library and stores a Pass, Fail, or Skipped result for every applicable control. This posture is stored on both the Image Entity and the Container Entity.
How it Works
Each control in the library is identified by a control ID (CID), has an assigned criticality (High, Medium, or Low), and is mapped to a policy (for example, CIS Benchmark). When a container or image is scanned, every applicable control is evaluated and assigned one of the following postures.
|
Posture |
Description |
|
Pass |
The container meets the control's requirement. |
|
Fail |
The container does not meet the control's requirement. |
|
Skipped |
Qualys had insufficient image or container data to evaluate the control, so no Pass/Fail determination could be made. |
By default, Qualys Container Security applies the Compliance scan.