<commit_before>---
description: 'Docker Security Scanning: automatic image scanning'
keywords: Docker, docker, scan, scanning, security, registry, plans, Docker Cloud, docs, documentation, trusted, builds, trusted builds, automated builds
title: Docker Security Scanning
---

Docker Cloud and Docker Hub can scan images in private repositories to verify
that they are free from known security vulnerabilities or exposures, and report
the results of the scan for each image tag.

> **Note**: Docker Security Scanning uses an older user interface style on Docker Hub, and will look a little different than the images in this document.

![Scanned results](images/scan-view.png)

Docker Security Scanning is available as an add-on to Docker hosted private
repositories on both Docker Cloud and Docker Hub. The feature is available as a
free preview for private repository subscribers for a limited time. You can
opt-in to begin using the service from the Plan page.

During the free period, Docker Security Scanning scans the three most recently
updated tags in each of your private repositories. You can push an update to an
older tag to trigger a scan. The scan runs on each new image push, and updates
the scan results when new information comes in from the CVE databases.

You can also view scan results for Official Images on Docker Hub if you are logged in.

## Opt in to Docker Security Scanning

To opt in:

1. Log in to Docker Cloud or Docker Hub.

2. Go to the **Plan** details for your account

    On Docker Cloud these are located in the **Cloud Settings** in the lower left. On Docker Hub, these are in the **Billing and Plans** tab of the **Settings** menu.

3. Check **Monitor with Docker Security Scanning** to add the service to your plan.

    ![](images/scan-enable.png)

The scanning process begins immediately for the three most recent tags in each
of your private repositories. The scan results should be available within 48
hours at most.

## View Docker Security Scanning results

Once you opt-in to the Docker Security Scanning and the scan process completes, you can view the scan results for your private repos.

To view scan results:

1. Log in to Docker Cloud or Docker Hub.

2. Navigate to the repository details page.

3. Click **Tags**.

    The Tag view displays a summarized view of each tag scan, and the age of the scan.

    ![Scanned tags](images/scan-tags.png)

    A solid green bar indicates a clean scan without known vulnerabilities.
    Colored stripes in yellow, orange, and red indicate minor, major, critical
    vulnerabilities respectively.
<commit_msg>Update image-scan.md (#2247)<commit_after>---
description: 'Docker Security Scanning: automatic image scanning'
keywords: Docker, docker, scan, scanning, security, registry, plans, Docker Cloud, docs, documentation, trusted, builds, trusted builds, automated builds
title: Docker Security Scanning
---

Docker Cloud and Docker Hub can scan images in private repositories to verify
that they are free from known security vulnerabilities or exposures, and report
the results of the scan for each image tag.

> **Note**: Docker Security Scanning uses an older user interface style on Docker Hub, and will look a little different than the images in this document.

![Scanned results](images/scan-view.png)

Docker Security Scanning is available as an add-on to Docker hosted private
repositories on both Docker Cloud and Docker Hub. The feature is available as a
free preview for private repository subscribers for a limited time. You can
opt-in to begin using the service from the Plan page.

During the free period, Docker Security Scanning scans the three most recently
updated tags in each of your private repositories. You can push an update to an
older tag to trigger a scan. The scan runs on each new image push, and updates
the scan results when new information comes in from the CVE databases.

You can also view scan results for Official Images on Docker Hub if you are logged in.

## Opt in to Docker Security Scanning

To opt in:

1. Log in to Docker Cloud or Docker Hub.

2. Go to the **Plan** details for your account.

    On Docker Cloud these are located in the **Cloud Settings** in the lower left. On Docker Hub, these are in the **Billing and Plans** tab of the **Settings** menu.

3. Check **Monitor with Docker Security Scanning** to add the service to your plan.

    ![](images/scan-enable.png)

The scanning process begins immediately for the three most recent tags in each
of your private repositories. The scan results should be available within 48
hours at most.

## View Docker Security Scanning results

Once you opt-in to the Docker Security Scanning and the scan process completes, you can view the scan results for your private repos.

To view scan results:

1. Log in to Docker Cloud or Docker Hub.

2. Navigate to the repository details page.

3. Click **Tags**.

    The Tag view displays a summarized view of each tag scan, and the age of the scan.

    ![Scanned tags](images/scan-tags.png)

    A solid green bar indicates a clean scan without known vulnerabilities.
    Colored stripes in yellow, orange, and red indicate minor, major, and critical
    vulnerabilities respectively.

{'fraction_non_alphanumeric': 0.05097738597163664, 'fraction_numerical': 0.0038328861632809506, 'mean_word_length': 4.131760078662733, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 5, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1343955', 'n_tokens_mistral': 1347, 'n_tokens_neox': 1230, 'n_words': 811}