Prisma Cloud Compute: How does Compute scan images and determines type of the package?
1239
Created On 11/15/23 20:05 PM - Last Modified 11/22/24 14:35 PM
Objective
The objective of this article is to provide information about the Compute images scan and determination of the type of the package.
Environment
- Prisma Cloud Compute Saas version
- Prisma Cloud Compute Self-hosted version
Procedure
- Prisma Cloud Compute reports vulnerability based on the Package Types. There are multiple package types that you will see in the scan report, i.e. JAR, Npm/Node packages, OS, Python, etc. The information in the "Package type" column is based on how the package is installed in a container/image.
- If the package is installed using the package manager and if there is a vulnerability in it, we will take our information from the OS/vendor feed and the Package Type will show OS. If the package is not part of the OS and is installed as a third-party installation, we will show their respective package type, i.e. Python, NodeJS, etc.
Additional Information
For more information on Package Types here.