Register Container Images#

Read Only the Method You Use

Manage vulnerabilities in the OS packages and libraries included in your container images. The method to use depends on where you build your images and where you store them.

Who this is for
Technical staff (those who develop and operate containers)

Time required
Varies by method

What you'll learn
How to choose a method for registering container images, and the flow for each

You're done when
The container images you want to manage appear in the server list, and a mechanism to keep them updated is in place

Choosing a Method#

Go through the questions from the top to decide.

Question	If "Yes"	Updates
1. Do you use a CI/CD tool?	CI/CD integration with Docker Scan (Trivy): Images are registered automatically with every build	Automatic
2. Do you manage images in Amazon ECR or Google Artifact Registry?	Docker Scan (ECR/GAR integration): You can register images just by configuring the integration. For ECR, we recommend using enhanced scanning	Automatic
3. Can you run Trivy in your own environment?	Local execution of Docker Scan (Trivy): Also works in environments other than AWS and Google Cloud	Automatic (manual for the lightweight version)
4. Can you prepare an SBOM for the container?	SBOM Import: Even without the image, you can register it if you have the SBOM file (SBOM Import)	Manual

The Flow for Each Method#

For detailed steps, see Docker Scan (Trivy), Docker Scan (ECR/GAR), and Integrating into a CI/CD Pipeline.

Docker Scan (Trivy)#

Scan images with Trivy and send the results to FutureVuls. If you build this into your CI/CD pipeline, the information is brought up to date with every build.

Docker Scan (ECR/GAR Integration)#

Integrate with Amazon ECR or Google Artifact Registry to import the images registered there. For the differences between basic scanning and enhanced scanning in ECR, see "I want to know the difference between basic scanning and enhanced scanning in the Amazon ECR container registry integration".

Common Issues#

Symptom	Cause and solution
You want to register multiple images on one server	See "I want to register multiple Docker images on one server"
The Trivy scan succeeds, but the results are not reflected	See "Scan results are not reflected (Trivy scan)"

Troubleshooting#

If something isn't working, see Troubleshooting (FAQ).

If that doesn't solve the problem, contact us through the support contact form. Including the method you are using, the target image, and the error message helps us investigate faster.

Learn More#

Next Page#

When registration is complete, check your progress in the "After You Register All Servers in the Initial Scope" section of Setup 2: Register Servers and Products.

Go to Setup 2: Register Servers and Products