Quay Container Security Operator (CSO)

Open a browser window and log in to the Red Hat OpenShift Container Platform web console.

From the Administrator perspective, click Operators, then OperatorHub.

In the Filter by keyword field, type Quay.

Select the Red Hat Quay Container Security Operator tile and click Install.

Select stable-3.7 from the list of available Update Channel options. Choose All namespaces on the cluster (default) as the installation mode. Choose Automatic update approval.

Click Install to start the installation process.

Deploy a vulnerable image. For this example, we are going to deploy an old httpd vulnerable image.

Navigate to the Quay Registry Endpoint and select the olleb/httpd-24 repository that has been automatically created when we pulled the image before.

Select Settings and then click Make Public.

Open the Red Hat OpenShift Container Platform web console and create a new project by clicking Projects then Create Project. Name the project as vuln-httpd and then click Create.

In the vuln-httpd project, deploy the vulnerable image by clicking Workloads then Deployments. Click Create Deployment.

Replace the default image value with the image from our Quay registry. Set replicas as desired and set httpd as the custom name.

Click Create.

Red Hat OpenShift will start the deployment and create the pod. Go to Workloads then Pods and select one of the httpd pods. Select the Vulnerabilities tab.

Click on the security scan results.

Click Image Vulnerabilities.

Click View all and then click on the Manifest related to olleb/httpd-24.