Searching for Images - Dynamic Tags
Use the search tokens below to search for images. Looking for help with writing your query? click here.
image.uuidimage.uuid
Use an image.uuid value to find images based on their unique Qualys-assigned identifier.
Example
Show images with a specific Qualys-assigned image UUID.
image.uuid: "a1b2c3d4-e5f6-7890-abcd-ef1234567890"
image.shaimage.sha
Use an image.sha value to find images based on their SHA256 manifest digest.
Example
Show images with a specific SHA256 manifest digest.
image.sha: "sha256:3f4e5c6d7b8a9e0f1234567890abcdef"
image.imageIdimage.imageId
Use an image.imageId value to find images based on their Docker image ID.
Example
Show images with a specific Docker image ID.
image.imageId: "sha256:1a2b3c4d5e6f"
image.customerUuidimage.customerUuid
Use an image.customerUuid value to find images belonging to a specific Qualys customer account.
Example
Show images belonging to a specific Qualys customer account UUID.
image.customerUuid: "b3c4d5e6-f7a8-9012-bcde-f34567890abc"
image.parentUuidimage.parentUuid
Use an image.parentUuid value to find images derived from a specific parent image.
Example
Show images derived from a specific parent image UUID.
image.parentUuid: "e5f6a7b8-c9d0-1234-efab-cd5678901234"
image.repo.registryimage.repo.registry
Use an image.repo.registry value to find images from a specific container registry (for example, docker.io or an ECR hostname).
Example
Show images from a specific container registry.
image.repo.registry: "docker.io"
image.repo.repositoryimage.repo.repository
Use an image.repo.repository value to find images from a specific repository.
Example
Show images from a specific repository.
image.repo.repository: "library/nginx"
image.repo.tagimage.repo.tag
Use an image.repo.tag value to find images with a specific tag.
Example
Show images with a specific tag.
image.repo.tag: "latest"
image.repoDigests.registryimage.repoDigests.registry
Use an image.repoDigests.registry value to find images with a repo digest from a specific registry.
Example
Show images with a repo digest from a specific registry.
image.repoDigests.registry: "docker.io"
image.repoDigests.repositoryimage.repoDigests.repository
Use an image.repoDigests.repository value to find images with a repo digest from a specific repository.
Example
Show images with a repo digest from a specific repository.
image.repoDigests.repository: "library/ubuntu"
image.repoDigests.digestimage.repoDigests.digest
Use an image.repoDigests.digest value to find images with a specific repo digest.
Example
Show images with a specific repo digest value.
image.repoDigests.digest: "sha256:a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2"
image.label.keyimage.label.key
Use an image.label.key value to find images that have a specific Docker label key.
Example
Show images that have a specific Docker label key.
image.label.key: "maintainer"
image.label.valueimage.label.value
Use an image.label.value value to find images that have a specific Docker label value.
Example
Show images that have a specific Docker label value.
image.label.value: "team-security"
image.layersCountimage.layersCount
Use an image.layersCount value to find images with a specific number of layers. You can also use comparison operators (for example, > or <).
Example
Show images that have a specific number of layers.
image.layersCount: 10
image.dockerVersionimage.dockerVersion
Use an image.dockerVersion value to find images built with a specific Docker version.
Example
Show images built with a specific Docker version.
image.dockerVersion: "20.10.17"
image.sizeimage.size
Use an image.size value (in bytes) to find images of a specific size. You can also use comparison operators (for example, > or <).
Example
Show images of a specific size (in bytes).
image.size: 500000000
image.architectureimage.architecture
Use an image.architecture value to find images built for a specific CPU architecture.
Example
Show images built for a specific CPU architecture.
image.architecture: "amd64"
image.hostArchitectureimage.hostArchitecture
Use an image.hostArchitecture value to find images running on a host with a specific CPU architecture.
Example
Show images running on a host with a specific CPU architecture.
image.hostArchitecture: "amd64"
image.host.sensorUuidimage.host.sensorUuid
Use an image.host.sensorUuid value to find images scanned by a specific sensor.
Example
Show images scanned by a sensor with a specific UUID.
image.host.sensorUuid: "f1a2b3c4-d5e6-7890-abcd-ef1234567890"
image.host.uuidimage.host.uuid
Use an image.host.uuid value to find images running on a host with a specific Qualys host UUID.
Example
Show images running on a host with a specific Qualys host UUID.
image.host.uuid: "c3d4e5f6-a7b8-9012-cdef-ab3456789012"
image.host.hostnameimage.host.hostname
Use an image.host.hostname value to find images running on a host with a specific hostname.
Example
Show images running on a host with a specific hostname.
image.host.hostname: "example-host-01"
image.host.ipAddressimage.host.ipAddress
Use an image.host.ipAddress value to find images running on a host with a specific IP address.
Example
Show images running on a host with a specific IP address.
image.host.ipAddress: "192.0.2.25"
image.host.ipV6Addressimage.host.ipV6Address
Use an image.host.ipV6Address value to find images running on a host with a specific IPv6 address.
Example
Show images running on a host with a specific IPv6 address.
image.host.ipV6Address: "2001:db8::1"
image.vulnerabilityCountimage.vulnerabilityCount
Use an image.vulnerabilityCount value to find images with a specific number of vulnerabilities. You can also use comparison operators (for example, > or <).
Example
Show images that have more than a specific number of vulnerabilities.
image.vulnerabilityCount: > 10
image.services.nameimage.services.name
Use an image.services.name value to find images that expose a service with a specific name.
Example
Show images that expose a service with a specific name.
image.services.name: "http"
image.services.descriptionimage.services.description
Use an image.services.description value to find images that expose a service matching a specific description.
Example
Show images that expose a service matching a specific description.
image.services.description: "World Wide Web HTTP"
image.services.statusimage.services.status
Use an image.services.status value to find images that expose a service with a specific status.
Example
Show images that expose a service with a specific status.
image.services.status: "open"
image.usersimage.users
Use an image.users value to find images associated with a specific username.
Example
Show images associated with a specific username.
image.users: "appuser"
image.registryUuidimage.registryUuid
Use an image.registryUuid value to find images from a specific registry identified by its Qualys UUID.
Example
Show images from a registry with a specific Qualys UUID.
image.registryUuid: "d4e5f6a7-b8c9-0123-defa-bc4567890123"
image.sourceimage.source
Use an image.source value to find images based on how they were discovered. Accepted values: CICD, COMMAND_LINE, CONTINUOUS_ASSESSMENT, GENERAL, HOST, REGISTRY, SERVERLESS_FARGATE.
Example
Show images discovered through a registry scan.
image.source: "REGISTRY"
image.isDockerHubOfficialimage.isDockerHubOfficial
Use an image.isDockerHubOfficial value to find images that are official Docker Hub images. Accepted value: true.
Example
Show images that are official Docker Hub images.
image.isDockerHubOfficial: true
image.scanTypeimage.scanType
Use an image.scanType value to find images scanned using a specific scan method. Accepted values: DYNAMIC, SCA, STATIC.
Example
Show images that were scanned using static analysis.
image.scanType: "STATIC"
image.scanErrorCodeimage.scanErrorCode
Use an image.scanErrorCode value to find images that encountered a specific error code during scanning.
Example
Show images that encountered a specific scan error code.
image.scanErrorCode: "AUTH_FAILURE"
image.scanStatusimage.scanStatus
Use an image.scanStatus value to find images based on their scan result. Accepted values: FAILED, SUCCESS.
Example
Show images whose last scan failed.
image.scanStatus: "FAILED"
image.maxQdsScoreimage.maxQdsScore
Use an image.maxQdsScore value to find images with a specific maximum QDS score. You can also use comparison operators (for example, > or <).
Example
Show images with a maximum QDS score above a specific threshold.
image.maxQdsScore: > 80
image.qdsSeverityimage.qdsSeverity
Use an image.qdsSeverity value to find images with a specific QDS severity rating. Accepted values: CRITICAL, HIGH, MEDIUM, LOW.
Example
Show images with a critical QDS severity rating.
image.qdsSeverity: "CRITICAL"
image.riskScoreimage.riskScore
Use an image.riskScore value to find images with a specific TruRisk score. You can also use comparison operators (for example, > or <).
Example
Show images with a TruRisk score above a specific threshold.
image.riskScore: > 500
image.lastFoundOnHost.sensorUuidimage.lastFoundOnHost.sensorUuid
Use an image.lastFoundOnHost.sensorUuid value to find images last detected by a specific sensor.
Example
Show images last detected by a sensor with a specific UUID.
image.lastFoundOnHost.sensorUuid: "a2b3c4d5-e6f7-8901-bcde-f23456789012"
image.lastFoundOnHost.uuidimage.lastFoundOnHost.uuid
Use an image.lastFoundOnHost.uuid value to find images last detected on a host with a specific Qualys host UUID.
Example
Show images last detected on a host with a specific Qualys host UUID.
image.lastFoundOnHost.uuid: "b4c5d6e7-f8a9-0123-cdef-d45678901234"
image.lastFoundOnHost.hostnameimage.lastFoundOnHost.hostname
Use an image.lastFoundOnHost.hostname value to find images last detected on a host with a specific hostname.
Example
Show images last detected on a host with a specific hostname.
image.lastFoundOnHost.hostname: "example-host-02"
image.lastFoundOnHost.ipAddressimage.lastFoundOnHost.ipAddress
Use an image.lastFoundOnHost.ipAddress value to find images last detected on a host with a specific IP address.
Example
Show images last detected on a host with a specific IP address.
image.lastFoundOnHost.ipAddress: "192.0.2.50"
image.vulnerabilities.layerShaimage.vulnerabilities.layerSha
Use an image.vulnerabilities.layerSha value to find images that have a vulnerability in a specific layer identified by its SHA digest.
Example
Show images that have a vulnerability in a layer with a specific SHA digest.
image.vulnerabilities.layerSha: "sha256:b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3"