You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Docker Scout health grade shows “A” despite outstanding vulnerabilities #214
Environment: Docker Hub / Docker Scout UI for image dellhpcomniaaisolution/ubuntu-ldms:1.0 (linux/amd64, based on ubuntu:24.04).
Issue: The Health badge at the top of the image view shows grade A, even though the vulnerability panel lists 968 total vulnerabilities (0 Critical, 3 High, 860 Medium, 44 Low) and highlights multiple fixable CVEs (e.g., CVE-2025-38666, CVE-2025-24049, CVE-2025-68973).
Expectation: Health grade should degrade from “A” when dozens/hundreds of Medium/Low issues exist, especially when Docker Scout marks them fixable.
Impact: Health grade misleads users into thinking the image is compliant; policy checks or automated gates that rely on the badge will incorrectly pass.
Please investigate how health scoring is calculated; it appears to ignore medium/low issues entirely or is not updated after new CVEs are detected.
Activity