Prisma Cloud Compute: Deployed scans are rescanning images in Registry
5299
Created On 07/28/23 23:22 PM - Last Modified 07/28/23 23:25 PM
Symptom
Images already scanned in registries are being scanned again by defenders when deployed.
Environment
- Prisma Cloud Compute (SaaS)
- Prisma Cloud Compute Edition (Self Hosted) 19.11 or later
Cause
The Registry scan and Deployed scan are 2 independent scans so their data is not shared. Registry images will not be rescanned if already scanned once but deployed images will be rescanned as per the scheduled scan frequency defined under Manage>System>Scan>Containers with a default of every 24 hours.
Resolution
An image scanned in the Registry is expected to be scanned again when deployed even if it is exactly the same.