Container vulnerability scanning student plan

Question

Hi community! I am using Azure with a student plan. I have an ACR registry and I would like to see if my images contain vulnerabilities. However, I cannot see results on the Microsoft Defender for Cloud. Does that mean that my containers do not have vulnerabilities? I ran other OSS tools against them and they reported many vulnerabilities.

Is it possible that my student subscription does not include container image scanning?

Thanks,

Jacopo

Answer 1

Hi BUFALINO Jacopo,
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Based upon your question, It seems you're having trouble seeing vulnerability results in Microsoft Defender for Cloud, even though other tools have flagged issues. There are a few possible reasons for this. Please try few troubleshooting process

First, check if your student plan includes container image scanning, as it might have limited features compared to paid subscriptions. To do this, go to the Azure Portal, navigate to Microsoft Defender for Cloud, then under Management, select Environment Settings. Choose your subscription and check the Settings. Look for the Agentless container vulnerability assessment extension to ensure it’s turned on, and make sure the Microsoft Defender for Containers plan is enabled, as this includes the image scanning feature.

Additionally, keep in mind that Defender scans images when they’re pushed, imported, or pulled within the last 30 days. If your images haven’t been updated or pulled recently, they might not have been scanned. There could also be limitations in what types of vulnerabilities Defender can detect or the formats of the images you’re using. Please refer this document for more information
If have any further query please let us know will always assist you,

If you found this helpful, please click an accepting the answer and "Upvote" on my post for other community members reference