> For the complete documentation index, see [llms.txt](https://docs.heeler.com/mrecEO40m5D6bt7Pq5pE/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.heeler.com/mrecEO40m5D6bt7Pq5pE/findings/containers/images.md).
# Container Images
The Images listing under Security → Containers — one row per image digest, what each column reports, and every filter available.
**Security → Containers → Images** lists every scanned image, one row per digest, newest push first.
Security → Containers → Images — one row per image digest, with its registry host beneath the repository name.
The filter bar opens on the most-used filters, with **All Filters** for the rest. The bookmark control saves the current set.
## Columns
| Column | What it shows |
| ------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Repository** | The repository name, with the registry host beneath it and the cloud provider's icon. A `×N` badge means the same digest is also in N other repositories. |
| **Tags** | The tags on this digest. Two are shown; the rest fold into a **+N** control. |
| **Scan** | **Queued**, **Scanning**, **Scanned** or **Failed**. Hover a **Failed** badge for the reason. |
| **Exposure** | Whether a workload running this image is reachable from the internet. |
| **Tier** | The tier of the service running the image. |
| **In Use** | **N running** when a live workload references the digest, linking to the image's Usage tab; **Not running** otherwise. |
| **Vulnerabilities** | Counts by severity — critical, high, medium and low. These count vulnerabilities **with a fix available**. Each badge opens the image's Vulnerabilities tab filtered to that severity. |
| **Secrets** | The number of secrets found in the image's layers, linking to its Secrets tab. `0` when none. |
| **OS** | The distribution and release, with a support badge beneath it — **EOL soon** or **EOL**. |
| **Base Image** | The base the image declares, with a badge for how it was declared. |
| **Base Upgrade** | **removes N** when a newer base tag clears base vulnerabilities, or **up to date**. |
| **Last Pushed** | When the digest was last pushed. |
| **Last Scanned** | When the last completed scan finished. |
Sort by clicking a column header. The **Vulnerabilities** column sorts by critical, high, medium or low counts.
Select a row to open the image drawer, which carries the same overview and the same five tabs as the detail page. The drawer's title links through to the full [image detail page](/mrecEO40m5D6bt7Pq5pE/findings/containers/image-detail.md).
## Filters
Open the filter bar to narrow the list. The same vocabulary serves this listing and the [Vulnerabilities](/mrecEO40m5D6bt7Pq5pE/findings/containers/vulnerabilities.md) listing. Here, a filter describing a finding selects images that have at least one finding matching it.
### Image and registry
| Filter | Values |
| ---------------- | -------------------------------------- |
| **Repository** | The registry repository. |
| **Registry** | The registry host. |
| **Tag** | Any tag on the digest. |
| **Cloud** | AWS or Google Cloud. |
| **Architecture** | The image's architecture. |
| **Base Image** | The base the image declares. |
| **Pushed** | A date range for the last push. |
| **Scan Status** | Queued, Scanning, Completed or Failed. |
### Contents
| Filter | Values |
| ------------------ | ------------------------------------------------------------- |
| **OS** | The operating-system distribution. |
| **Support Status** | Supported, End of life soon, End of life, or Support unknown. |
| **Package** | A package name. |
| **Package Type** | The package ecosystem. |
| **Has Secrets** | Secrets found, or no secrets found. |
### Findings
| Filter | Values |
| ---------------------- | --------------------------------------------------------------------------------------------------------------------- |
| **Severity** | Critical, High, Medium, Low or Unknown. |
| **Vulnerability** | A vulnerability identifier. |
| **Fix Available** | Yes or No. |
| **Fix Status** | Fix available; Affected, no fix yet; Fix deferred by distribution; Will not fix (distribution); End of life; Unknown. |
| **Known Exploited** | On the KEV list, or not on the KEV list. |
| **Exploit Likelihood** | Actively exploited, Possibly exploited, or Likely not exploited. |
| **Risk** | Urgent, Plan or Defer. |
| **Base Upgrade** | Upgrade available, or no upgrade available. |
| **First Seen** | A date range for when the finding first appeared. |
### Ownership and runtime
| Filter | Values |
| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Source Repository** | The connected repository the image was built from. |
| **Linked By** | How the image was matched to that repository: Build provenance, Image label, Service correlation, Deployment manifest, Name match (suggested), or Linked manually. |
| **Team** | The team owning the source repository. |
| **Service** | The service running the image. |
| **Application** | The application the service belongs to. |
| **Environment** | The environment the workload runs in. |
| **Tier** | The service tier. |
| **In Use** | Running, or not running. |
| **Runs On** | ECS service, ECS task, Kubernetes workload, Kubernetes pod, Cloud Run revision, or Lambda function. |
| **Internet Facing** | Internet facing, or not internet facing. |
## Search and export
The search box matches the text of the listing. **Export** downloads the current list, with your filters and search applied.
## Related
* [Container Image Detail](/mrecEO40m5D6bt7Pq5pE/findings/containers/image-detail.md) — one image in full.
* [Container Vulnerabilities](/mrecEO40m5D6bt7Pq5pE/findings/containers/vulnerabilities.md) — the same data, one row per advisory.
* [Scanning and Retention](/mrecEO40m5D6bt7Pq5pE/findings/containers/scanning-and-retention.md) — when a row appears, refreshes and is removed.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.heeler.com/mrecEO40m5D6bt7Pq5pE/findings/containers/images.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
