Agentless Scanning Compatibility Matrix
이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우
언제든지 연락주시기 바랍니다.Linux distributions
The following Linux distributions are supported for hosts and containers scans:
| Operating System | Supported Versions | Package Managers | Security Advisories |
|---|
| Alpine Linux | 2.2-2.7, 3.0-3.19 (edge is not supported) | apk | https://secdb.alpinelinux.org/ |
| Wolfi Linux | N/A | apk | https://packages.wolfi.dev/os/security.json |
| Chainguard | N/A | apk | https://packages.cgr.dev/chainguard/security.json |
| Red Hat Enterprise Linux | 6, 7, 8 | dnf/yum/rpm | https://www.redhat.com/security/data/metrics/ and https://www.redhat.com/security/data/oval/v2/ |
| CentOS | 6, 7, 8 | dnf/yum/rpm | https://www.redhat.com/security/data/metrics/ and https://www.redhat.com/security/data/oval/v2/ |
| AlmaLinux | 8, 9 | dnf/yum/rpm | https://errata.almalinux.org/ |
| Rocky Linux | 8, 9 | dnf/yum/rpm | https://download.rockylinux.org/pub/rocky/ |
| Oracle Linux | 5, 6, 7, 8 | dnf/yum/rpm | https://linux.oracle.com/security/oval/ |
| CBL-Mariner | 1.0, 2.0 | dnf/yum/rpm | https://github.com/microsoft/CBL-MarinerVulnerabilityData/ |
| Amazon Linux | 1, 2, 2023 | dnf/yum/rpm | https://alas.aws.amazon.com/ |
| openSUSE Leap | 42, 15 | zypper/rpm | http://ftp.suse.com/pub/projects/security/cvrf/ |
| SUSE Linux Enterprise | 11, 12, 15 | zypper/rpm | http://ftp.suse.com/pub/projects/security/cvrf/ |
| Photon OS | 1.0, 2.0, 3.0, 4.0 | tdnf/yum/rpm | https://packages.vmware.com/photon/photon_cve_metadata/ |
| Debian GNU/Linux | 7, 8, 9, 10, 11, 12 (unstable/sid is not supported) | apt/dpkg | https://security-tracker.debian.org/tracker/ and https://www.debian.org/security/oval/ |
| Ubuntu | All versions supported by Canonical | apt/dpkg | https://ubuntu.com/security/cve |
Application libraries
The following application languages and libraries are supported for vulnerability scans on containers and Lambda instances:
| Language | Supported Package Manager | Supported Files |
|---|
| Ruby | bundler | Gemfile.lock, gemspec |
| .NET | nuget | packages.lock.json, packages.config, .deps.json, *packages.props |
| Go | mod | Binaries built by Go, go.mod |
| Java | Gradle, Maven | pom.xml, *gradle.lockfile, JAR/WAR/PAR/EAR (with pom.properties) |
| Node.js | npm, pnpm, yarn | package-lock.json, yarn.lock, pnpm-lock.yaml, package.json |
| PHP | composer | composer.lock |
| Python | pip, poetry | pipfile.lock, poetry.lock, egg package, wheel package, conda package |
Container image registries
The following container image registries are supported for container image scans:
- AWS ECR public
- AWS ECR private
Note: Container image scanning from registry is only supported if you have installed Agentless with:
- Cloudformation Integrations >= v2.0.8
- Terraform Agentless Module >= v0.11.7
Container runtimes
The following container runtimes are supported:
- containerd: v1.5.6 or later
- Docker
Note for container observations: Agentless Scanning requires uncompressed container image layers. As a workaround, you can set the configuration option discard_unpacked_layers=false in the containerd configuration file.
