Viewing Scan Results

Scan results are available as the CLI output in your terminal or in the CloudGuard portal.

CLI Output

The Scan Engine prints the scan results to the CLI. This output can be displayed in a table view or as a JSONClosed JavaScript Object Notation. A lightweight data interchange format. file. The results are based on the assessments that consider vulnerabilities found in the scanned image against the attached policy.

The JSON output has the same format as the results of the assessment API. For more information about API, see the API Reference Guide.

When the scan results include more than 2 CVEs, they show the CVEs in short form: two CVEs with the highest severity and the number of the remaining CVEs (for example, CVEClosed The Common Vulnerabilities and Exposures (CVE) system provides a reference-method for publicly known information-security vulnerabilities and exposures.-123, CVE-456 and 10 others).

To see the full output:

  • use the -o flag to print the full output to a file

  • use the -j flag to see the output in JSON

Output in CloudGuard

The scan results shown in the CloudGuard portal include both the particular vulnerabilities found in the image and their assessment against the attached policy.

Upon scan completion, the Scan Engine sends the results to the associated environment in CloudGuard.

To see the scan results, do one of these: