sekuire images

List, scan, and inspect container images in the Sekuire OCI registry.

Subcommands

• images list - List images in registry
• images scan - Scan for vulnerabilities
• images scan-report - Detailed scan report

---

list

sekuire images list [OPTIONS]

Options

Option	Description
--agent <ID>	Agent ID (defaults to current project)
--backend <URL>	Sekuire API URL (default: https://api.sekuire.ai)
--format <FMT>	Output format: table, json (default: table)

Example

$ sekuire images list

  TAG                  DIGEST           SIZE      PUSHED               SCAN
  v1.0.0               sha256:1a2b3c...  45MB      2024-01-15T10:30:00   completed
  v0.9.0               sha256:4d5e6f...  44MB      2024-01-12T08:10:00   pending

---

scan

Trigger a vulnerability scan for an image by ID:

sekuire images scan <IMAGE_ID> [OPTIONS]

Options

Option	Description
--backend <URL>	Sekuire API URL (default: https://api.sekuire.ai)

Example

$ sekuire images scan img_abc123
  Triggering scan for image img_abc123...
  Scan triggered. Run 'sekuire images scan-report img_abc123' to view results.

---

scan-report

View the detailed vulnerability report for an image.

sekuire images scan-report <IMAGE_ID> [OPTIONS]

Options

Option	Description
--backend <URL>	Sekuire API URL (default: https://api.sekuire.ai)
--format <FMT>	Output format: table (default) or json

Example

$ sekuire images scan-report img_abc123

  Scan Report for image img_abc123
  Scanned: 2024-01-15T10:30:00Z

  Summary: 0 critical, 1 high, 3 medium, 7 low

  PACKAGE              VERSION          FIXED IN     SEVERITY
  ------------------------------------------------------------
  openssl              3.0.8            3.0.10       HIGH
  libcurl              7.88.0           7.88.1       MEDIUM
  zlib                 1.2.11           1.2.13       MEDIUM
  busybox              1.35.0           1.36.0       MEDIUM
  ...

JSON Output

sekuire images scan-report img_abc123 --format json

Returns structured data including:

• scanned_at: Scan timestamp
• vulnerabilities[]: Array of CVE details
  • package_name: Affected package
  • installed_version: Current version
  • fixed_version: Version with fix
  • severity: CRITICAL, HIGH, MEDIUM, or LOW
  • cve_id: CVE identifier (when available)

Severity Levels

Severity	Response Time	Description
CRITICAL	Immediate	Remote code execution, privilege escalation
HIGH	Within 7 days	Significant security impact
MEDIUM	Within 30 days	Moderate security impact
LOW	When convenient	Minor issues, informational

Workflow

# 1. Trigger a scan
sekuire images scan img_abc123

# 2. View summary
sekuire images list

# 3. Get detailed report
sekuire images scan-report img_abc123

Next Steps

• registry - Push images to registry
• OCI Registry - Registry architecture