AWS AmazonECR documentation change
Summary
Simplified scanning option descriptions by removing 'Improved basic scanning' reference and consolidating Basic scanning explanation. Removed deprecated Clair scanning details.
Security assessment
Change removes references to deprecated Clair scanning but doesn't address any active vulnerability. Update focuses on simplifying documentation rather than resolving security issues.
Diff
diff --git a/AmazonECR/latest/userguide/image-scanning.md b/AmazonECR/latest/userguide/image-scanning.md index 2b15b4c09..828acba01 100644 --- a//AmazonECR/latest/userguide/image-scanning.md +++ b//AmazonECR/latest/userguide/image-scanning.md @@ -11 +11 @@ Amazon ECR image scanning helps to identify software vulnerabilities in your con -Switching between the **Enhanced scanning** , **Basic scanning** , and the **Improved basic scanning** versions will cause previously established scans to no longer be available. You will have to set up your scans again. However, if you switch back to your previous scanning version the established scans will be available. +Switching between **Enhanced scanning** and **Basic scanning** will cause previously established scans to no longer be available. You will have to set up your scans again. However, if you switch back to your previous scanning type the established scans will be available. @@ -23,5 +23 @@ Archived images cannot be scanned. Archived images must be restored before they - * **Basic scanning** – Amazon ECR provides two versions of basic scanning which use the Common Vulnerabilities and Exposures (CVEs) database:. - - * **AWS native basic scanning** – Uses AWS native technology, which is now GA and recommended. All new customer registries are opted into this improved version by default. - - * **Clair basic scanning** – Uses the open source Clair project. Clair is now deprecated. See [Clair Deprecation](./image-scanning-basic.html#clair-deprecation) for details. + * **Basic scanning** – Amazon ECR uses AWS native technology with the Common Vulnerabilities and Exposures (CVEs) database to scan for operating system vulnerabilities.