Discovered Container Images

Table Name : (sn_vul_container_image)

The following table covered field mappings for the Discovered Containers: 

Field in Qualys Image API Response  Field in Qualys CS API Response  Corresponding Field on ServiceNow UI Expected Values
"Sha"   Image ID "sha256" + imageSha
 repo: {"repository" + "tag"}   Image name Image name: repository name
"operatingSystem"   Operating System operatingSystem
"created"   Image creation date

 Qualys CS stores this time in the UTC format. The integration converts this UTC time into the time zone configured for this ServiceNow instance.

"lastScanned"   Last scan

Qualys CS stores this time in the UTC format. The integration converts this UTC time into the time zone configured for this ServiceNow instance.

"lastFoundOnHost":{"hostname":""}   Hosts hostname
"label"   Image labels label
  "cluster":{"k8s":{"pod":{"name":" "}} Image clusters clustername
  "cluster":{"k8s":{"pod":{"namespace":" "}} Image namespaces clusternamespace
"repo": [
                {
                    "registry": "",
                  
                }
            ]
  Registry  
"repo": [
                {
                    "repository": ""
                }
            ]
  Repository   
"repo": [
                {
                    "tag": "latest",
                }
            ]
  Repository entry  
"associatedContainersCount"   Container Count Count of containers for each image
    Docker Image Reference of cmdb_ci_docker_image
    Image Repository Reference of cmdb_ci_container_repository
    Source Qualys CVR Instance (Hardcoded)
"Layers":{"sha"+"createdBy"}   Image layers Reference of sn_vul_container_image_layer
"assignedTags"{"name"}   Source Risk Factor Qualys Tags
"childImagesCount"   Is base image
  • if childImagesCount > 0 → true
  • if childImagesCount = 0 → false

 

Related Topic

Third-Party Vulnerability Entry

Container Vulnerable Item