# image scanning

Published articles for image scanning.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## What Is a Container Registry and How to Use One

DevFeed: [What Is a Container Registry and How to Use One](<https://devfeed.tech/articles/what-is-a-container-registry-and-how-to-use-one-17491.md>)

Original publisher: [Read original article](<https://kodekloud.com/blog/what-is-a-container-registry-and-how-to-use-one/>)

Author: Pramodh Kumar M

Published: 2026-08-10T17:48:35Z

Content type: tutorial

Language: en

Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More](<https://devfeed.tech/sources/kubernetes-kodekloud-blog-devops-cloud-kubernetes-ai-tutorials-more.md>)

Topics: [container images](<https://devfeed.tech/topics/container-images.md>), [content addressed store](<https://devfeed.tech/topics/content-addressed-store.md>), [Docker Hub](<https://devfeed.tech/topics/docker-hub.md>), [Dockerfile](<https://devfeed.tech/topics/dockerfile.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>)

Tags: [base-images](<https://devfeed.tech/tags/base-images.md>), [cache](<https://devfeed.tech/tags/cache.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [container-registry](<https://devfeed.tech/tags/container-registry.md>), [containers](<https://devfeed.tech/tags/containers.md>), [content-addressed-store](<https://devfeed.tech/tags/content-addressed-store.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [devops](<https://devfeed.tech/tags/devops.md>), [docker](<https://devfeed.tech/tags/docker.md>), [docker-hub](<https://devfeed.tech/tags/docker-hub.md>), [docker-login](<https://devfeed.tech/tags/docker-login.md>), [docker-pull-rate-limits](<https://devfeed.tech/tags/docker-pull-rate-limits.md>), [docker-registry](<https://devfeed.tech/tags/docker-registry.md>), [harbor](<https://devfeed.tech/tags/harbor.md>), [image-manifest](<https://devfeed.tech/tags/image-manifest.md>), [image-retention-policy](<https://devfeed.tech/tags/image-retention-policy.md>), [image-scanning](<https://devfeed.tech/tags/image-scanning.md>), [image-tags-vs-digests](<https://devfeed.tech/tags/image-tags-vs-digests.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [private-registry](<https://devfeed.tech/tags/private-registry.md>), [pull-through-cache](<https://devfeed.tech/tags/pull-through-cache.md>), [reproducible-builds](<https://devfeed.tech/tags/reproducible-builds.md>), [security](<https://devfeed.tech/tags/security.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>)

### AI overview

This guide explains how container registries store and distribute container images, emphasizing the distinction between mutable tags and immutable content digests. It also covers pushing, pulling, authentication, Docker Hub rate limits, caching, scanning, and retention.

### Source excerpt

A tag is a bookmark somebody else can move. A digest is the image itself. Once that distinction lands, reproducible builds, supply chain security, and every it worked yesterday mystery make sense.

## Enforce against vulnerability sprawl with up-to-date images

DevFeed: [Enforce against vulnerability sprawl with up-to-date images](<https://devfeed.tech/articles/enforce-against-vulnerability-sprawl-with-up-to-date-images-13028.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/enforce-against-vulnerability-sprawl-with-up-to-date-images>)

Published: 2023-05-03T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [Docker Hub](<https://devfeed.tech/topics/docker-hub.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [containers](<https://devfeed.tech/tags/containers.md>), [development](<https://devfeed.tech/tags/development.md>), [docker-hub](<https://devfeed.tech/tags/docker-hub.md>), [hardened-images](<https://devfeed.tech/tags/hardened-images.md>), [image-scanning](<https://devfeed.tech/tags/image-scanning.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

This article reports on a 60-day Chainguard analysis comparing vulnerability accumulation in six popular Docker Hub images with six equivalent Chainguard Images. It recommends frequent image rebuilds and minimal, hardened containers to reduce vulnerability sprawl, security risk, and triage effort.

### Source excerpt

60-day study by Chainguard reveals vulnerability differences in Docker Hub vs. Chainguard Images.