Amazon Inspector container image scanning Amazon ECR Clair-based solution Scanning engine Amazon Inspector is a vulnerability management service developed by AWS that has built-in support for container images residing in Amazon ECR Amazon ECR offers a managed open-source Clair project as the basic scanning solution Package coverage Identifies vulnerabilities in both operating system (OS) packages and programming language (such as Python, Java, and Ruby) packages Identifies software vulnerabilities only in OS packages Scanning frequency Offers both continual scanning and on-push scanning Offers only on-push scanning Vulnerability intelligence Provides enhanced vulnerability intelligence such as whether an exploit is available for a CVE and fixed in package version remediation guidance Provides only basic information about a software vulnerability Findings Findings are available in both the Amazon Inspector and Amazon ECR consoles, as well as the Amazon Inspector and Amazon ECR Application Programming Interface (APIs) and Software Development Kit (SDK) Findings are available in the Amazon ECR console and Amazon ECR APIs and SDK Vulnerability scoring Provides a contextual Inspector score and Common Vulnerability Scoring System (CVSS) v2 and v3 scores from both National Vulnerability Database (NVD) and vendors CVSS v2 scores only AWS service integrations Integrated with AWS Security Hub, AWS Organizations, and AWS EventBridge No built-in integrations with other AWS services are available