How to run Container Analysis

How to run a Container Analysis test on a container image from the Polaris user interface.

Before you begin:

You need a Container Analysis project. See Container Analysis.
Export the container image you want to scan as a .tar file using docker save.

Run a Container Analysis scan

Follow these steps to run a Container Analysis scan from the Polaris user interface:

There's more than one way to start this procedure:
- Go to Portfolio, select an application, click the options icon at the end of the Container Analysis project's row, and select New Test.
- Go to Tests and select New Test.
Use the Application, Project, and Container dropdown menus to select the container to scan.
Note: Depending on how you started the test, some of these fields may already be filled in.
Upload the container image .tar file by dragging and dropping it into the upload zone, or by selecting Browse Files.
Important: The file must be a .tar archive exported with docker save. Uploading an invalid archive will result in an error.
Select Begin Test.
Note: The Begin Test button is locked until the file upload completes.

Monitor test progress on the Tests page (accessible from the left-hand navbar). Newer tests appear near the top of the page. Filter tests by date, type, mode, status, and the application, project, or container tested.

View container layers for a component

View the container layers that introduced or modified a component identified in a Container Analysis test.

Go to Portfolio, select an application, and select a Container Analysis project.
Open the Components tab.
Select the name of a component to open its details.
Select the Component Details tab, then scroll to Container Layers to view the layers in which the component was introduced and, if applicable, modified.
Each layer includes the command that touches the component (typically, ADD, RUN, or COPY).