Document continuous container vulnerability scanning
Problem to solve
The Continuous Vulnerability Scanning documentation mentions the required Dependency Scanning configuration, but does not mention the required Container Scanning configuration.
Further details
- The description mentions that Dependency Scanning is used to generate these reports, but it should mention that it also sources from the Container Scanning feature.
- The configuration section should mention that either Dependency Scanning or Container Scanning should be enabled instead of just Dependency Scanning.
- The supported languages and package managers should mention that it supports those supported by Dependency Scanning, as well as Debian and Ubuntu when Container Scanning is configured.
Who can address the issue
Other links/references
Edited by Oscar Tovar