Image Assurance

deprecation and removal notice

This feature was deprecated in Calico Cloud version 21.1.0 and will be removed in a future release. Availability depends on when you started using Calico Cloud.

• For users who started using Calico Cloud in April 2025 or later, this feature is not available.
• Legacy users, who started using Calico Cloud before April 2025, can continue to use this feature until it is removed in a future release.

Detect and block vulnerable images from container workloads.

Scaning images for vulnerabilities

Choose an image scanning method

Choose a method to scan images for vulnerabilities.

Scan images in a Kubernetes cluster

Detect vulnerabilities in a Kubernetes cluster.

Scan images in container registries

Scan images in container registries.

Integrate the scanner into your build pipeline

Scan images in your build pipeline using Image Assurance.

Working with scan results

Set up alerts on vulnerabilities

Get alerts on vulnerabilities.

View scanned and running images

Understand scan results in the web console.

Exclude vulnerabilities from scan results

Reduce noise in your Image Assurance scan results by excluding vulnerabilities.