Image scanning is the automated inspection of a container image to find vulnerable packages, outdated libraries, risky configuration settings, and other known weaknesses before the image is deployed. It analyzes the image contents, including the base image and installed dependencies, so teams can see what software will actually run in production.
In cyber security, image scanning matters because container images are often reused across many services. If an attacker exploits a known flaw in a common package or base image, that weakness can spread through the supply chain. Scanning helps defenders catch those problems early, when they are easier to patch or replace. In mature pipelines, scan results are not just reports: they can feed policy gates that block release, require approval, or trigger remediation. Used well, image scanning turns registry and CI/CD checks into a practical control against shipping dangerous artifacts.