> For the complete documentation index, see [llms.txt](https://docs.opsmx.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.opsmx.com/code-to-cloud-security-and-scanners/container-and-artifact-security/image-scanning.md).

# Image Scanning

Container Image Scanning identifies vulnerabilities and security risks within container images **before they are deployed** to any environment. Container images commonly include operating system packages, third-party libraries, application code, and configuration — any one of which can harbor CVEs, misconfigurations, or embedded secrets.

OpsMx Delivery Shield integrates **Container Security Scan** and **Package Vulnerability Scan** to scan every layer of every container image — providing comprehensive visibility into what is running inside each deployable unit.

## **Supported Registries**

* Docker Hub 
* Amazon ECR 
* Google Container Registry 
* Google Artifact Registry 
* Azure Container Registry 
* JFrog Artifactory 
* GitLab Container Registry 
* Quay

## **Benefits for the User**

* Vulnerabilities are caught at the image layer — before they are deployed to any environment
* Continuously updated CVE data ensures newly published vulnerabilities surface on running workloads, not just at next build
* SBOM per image supports SEBI CSCRF, NIST 800-53, and supply chain compliance requirements automatically