Which statement is NOT valid regarding the OCI Vulnerability Scanning service (VSS) for container images stored in Oracle Cloud Infrastructure Registry (OCIR)?
A.
A single container repository can be assigned to multiple scan targets in OCI Vulnerability Scanning to enforce different scan recipes.
B.
When a container scan target is created, the service scans a specified initial number of images, one by default, in the target repositories.
C.
Vulnerability reports for the scanned images are saved in the compartment containing the scan target, rather than the repository compartment.
D.
To run container image scans, you must explicitly grant the OCI Vulnerability Scanning service IAM permission to pull images from the registry.
Oracle explicitly states that youcannot create a container image target using a repository that is already specified in another target. Therefore, a single OCIR repository cannot simultaneously be assigned to multiple Vulnerability Scanning targets simply to apply different recipes, making A invalid. Oracle also documents that a newly created target scans a configurable initial number of existing images, with one image being the default, and subsequently scans newly pushed images. Scan results are stored in the compartment containing the Vulnerability Scanning target, even when the repository resides elsewhere. Before creating a target, administrators must also grant Vulnerability Scanning permission to pull images from Container Registry. Consequently, B, C, and D accurately describe documented VSS behavior.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit