[Eng]: Container Registry vulnerabilities showing in Microsoft Defender even after building the docker image from latest

Open

#21,691 opened on May 3, 2023 4 comments 0 reactions 1 assignee Claimed by @isra-fel View on GitHub

Azure PS Team customer-reported Docker Investigate :mag:

Description

### Description

### Steps to reproduce

Container Registry vulnerabilities showing in Microsoft Defender Recommendations.

After building the docker image from latest
docker pull mcr.microsoft.com/powershell

We found vulnerabilities are still showing. Attaching a screenshot for the same.

![image](https://user-images.githubusercontent.com/58744116/231487096-b80b8ca1-f876-4315-99f0-b6e53213f4a4.png)

### Expected behavior

```console
Container Registry vulnerabilities should not be showing in Microsoft Defender Recommendations, after building from the latest.
```

### Actual behavior

```console
Container Registry vulnerabilities are showing in Microsoft Defender Recommendations.

After building the docker image from latest
docker pull mcr.microsoft.com/powershell

We found vulnerabilities are still showing. Attaching a screenshot for the same.
```

### Error details

```console
Attached screenshot for the vulnerabilities.
```

### Environment data

```powershell
Attached screenshot for the vulnerabilities.
```

### Visuals

![image](https://user-images.githubusercontent.com/58744116/231488205-5f106722-c6c4-4d1b-a743-1b83501bc0cc.png)

This issue has not been assessed yet.