Unable to get docker image Tag while running Azure Resource Graph query for image vulnerability assessment

yash

5/6/23, 11:56 AM

We are generating docker vulnerability assessment report using azure resource graph query, after writing kusto query to generate the report of list of dockerimages that have vulnerability we are geting details regarding the docker repository and its corresponding sha/digest value and other details as required but we need docker tag also for that particular repository/digets value which we are unable to get in the azure resource query, we need to have the docker image tag data as well in our report Below is my kql query:

securityresources
| where type == "microsoft.security/assessments/subassessments"
| where id has "Assesment key" and isnotnull (properties.id)
| mv-expand properties.additionalData.cve
| mv-expand properties.additionalData.data
| mv-expand properties.additionalData.vendorReferences
| project Image=properties.additionalData.repositoryName, Digest=properties.additionalData.imageDigest, Dockertag=properties.additionalData.data.***, CVE=properties_additionalData_cve

can anyone tell what modifications we can make exactly in the *** section or some other way to get that data (Image Tag)?

0 + 0

azure

docker

yash

5/11/23, 7:30 PM

appreciate if anyone can help on this issue?

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Unable to get docker image Tag while running Azure Resource Graph query for image vulnerability assessment

TH: ไม่สามารถรับแท็กอิมเมจนักเทียบท่าขณะเรียกใช้คิวรี Azure Resource Graph สำหรับการประเมินช่องโหว่ของอิมเมจ

RO: Nu se poate obține eticheta de imagine Docker în timp ce rulează interogarea Azure Resource Graph pentru evaluarea vulnerabilității imaginii

RU: Не удалось получить тег образа Docker во время выполнения запроса Azure Resource Graph для оценки уязвимости образа.

VI: Không thể lấy Thẻ hình ảnh docker trong khi chạy truy vấn Azure Resource Graph để đánh giá lỗ hổng hình ảnh

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.