Why vulnerabilities are being ignored from mounted volume when volume is not mounted?
893
Created On 01/21/25 21:05 PM - Last Modified 10/13/26 00:11 AM
Question
Why vulnerabilities are being ignored from mounted volume when volume is not mounted?
- Scan reports can be checked using GUI: Monitor > Vulnerabilities > Images > Deployed > <Click on the image> > Package info
Environment
- Prisma Cloud Runtime Security
- Kubernetes
Answer
We skip mounted volumes because we only scan images and not the host. In the defender logs, we can see that mounted volume path is being ignored:
DEBU <DATE>T<TIMESTAMP> augment_static_linux.go:149 DEBU <DATE>T<TIMESTAMP> Ignoring path '<mounted path'To scan that directory remove VOLUME /<MOUNTED VOLUME PATH> from the Dockerfile. If you are not mounting the volume then remove VOLUME /<MOUNTED VOLUME PATH>, as this line makes defender think that the volume is mounted.
Additional Information
N/A