Discovered Container

Table Name : (sn_vul_container_image)

 Using the 'sn_vul_container_image' table, we sync only the container's data,  not the image data.

The following table covered field mappings for the Discovered Containers: 

The field in Qualys CS API Response  Field in Qualys Image API Response  Corresponding Field on ServiceNow UI Expected Values
""imageSha"   Image ID "sha256" + imageSha
 "name"   Image name Image name: repository name
"operatingSystem"   Operating System operatingSystem
"created"   Image creation date

 Qualys CS stores this time in the UTC format. The integration converts this UTC time into the time zone configured for this ServiceNow instance.

"lastScanned"   Last scan

Qualys CS stores this time in the UTC format. The integration converts this UTC time into the time zone configured for this ServiceNow instance.

"host":{"hostname":""}   Hosts hostname
"label"   Image labels label
"cluster":{"k8s":{"pod":{"name":" "}}   Image clusters clustername
"cluster":{"k8s":{"pod":{"namespace":" "}}   Image namespaces clusternamespace
  "repo": [
                {
                    "registry": "",
                  
                }
            ]
Registry  
  "repo": [
                {
                    "repository": ""
                }
            ]
Repository   
  "repo": [
                {
                    "tag": "latest",
                }
            ]
Repository entry  
    Container Count Count of containers for each image
    Docker Image Reference of cmdb_ci_docker_image
    Image Repository Reference of cmdb_ci_container_repository
    Source Qualys CVR Instance (Hardcoded)

 

Related Topic

Third-Party Vulnerability Entry

Container Vulnerable Item