Harbor: [Feature Request] Provide a UI to visualize container vulnerabilities

[cdchris12]

When trying to identify which containers within our registry contain vulnerabilities, it is frustrating to have to check every individual tag, within every individual registry, within every individual project. It's entirely infeasible to check every single container vulnerability report using the current UI framework for doing so.

Ideally, we would like to see a UI which would show the status of all container scans, scoped according to a user's permissions to view specific projects. This UI would allow users concerned with maintaining container security to get a high level view of the actual contents of these scans across all the projects they have access to. This data lends itself well to helping users determine which CVEs are worth allocating time to resolving due to their widespread occurrence across all their stored container images

[xaleeks]

I think maybe one view in each project is more reasonable. We will think about this. But this be easily retrievable via API as a workaround for now, let me know if you need help with that.

[gunboe]

This new feature sounds good for me too. A consolidated report and a critical CVE list of Images found will be nice to rectify or expunge the Image.

[dwctua]

A consolidated report with filter is crucial for operations. A all-in-one on-line downloadable report to show all the vulnerabilities, white listing(scope, expiration) alone with artifact is very helpful.
As side notes, it will be nice to have the CVE white list at image level to have better control.

[brondum]

+1 from here