ztvs scan#
Scan a target and report findings.
ztvs scan [TARGET] [OPTIONS]
TARGET is a directory path. Omit it when using --image or --archive.
| Flag | Type | Default | Description |
|---|---|---|---|
--image <REF> |
string | — | Scan an image from a registry |
--archive <PATH> |
path | — | Scan an image tarball on disk |
--format <FMT> |
text | json |
text |
Output format |
--severity <LEVEL> |
low | medium | high | critical |
low |
Minimum severity to report |
--skip-layers <N> |
integer | 0 |
Ignore the first N image layers |
--offline |
flag | off | Fail rather than fetch advisory data |
--db <PATH> |
path | platform cache | Advisory database location |
Exit codes
| Code | Meaning |
|---|---|
0 |
Scan completed, no findings at or above --severity |
1 |
Scan completed, findings present |
2 |
Scan could not complete |
Exit 1 is not an error. It means the scanner did its job and found something.
ztvs db#
Manage the advisory database.
ztvs db update
ztvs db status
ztvs --version#
Print the version and the advisory database timestamp.