Viewing and Remediating Vulnerability Assessment Findings for Registry Images

Microsoft Defender for Cloud allows users to remediate vulnerabilities in container images stored in the registry. The platform conducts contextual analysis to prioritize remediation based on risk levels.

Steps to View and Remediate Vulnerabilities:

1. Access the Recommendations Page:
   • Open Defender for Cloud.
   • Navigate to the new risk-based recommendations page.
2. View Vulnerability Findings:
   • Look for the recommendation: "Container images in Azure registry should have vulnerability findings resolved."
   • Select this recommendation to open the details page.
3. Review Vulnerabilities:
   • Go to the "Vulnerabilities" tab to see the list of issues affecting the registry image.
   • Select each vulnerability to get detailed descriptions, affected images, software version info, and links to external resources.
4. Group and Remediate Vulnerabilities:
   • Group recommendations by title to find all images impacted by a specific vulnerability.
   • Follow the provided remediation steps to address the vulnerabilities.

For more information, visit the full guide on the Microsoft Learn website.