Docker Scout Schema

DockerScoutPublicImage

Representation of the current public base image identified by a Docker Scout recommendations report.

Field	Description
firstseen	Timestamp of when a sync job first discovered this node
lastupdated	Timestamp of the last time the node was updated
id	Unique identifier for the public image (format: name:tag)
name	Name of the public image
tag	Tag of the public image
alternative_tags	Alternative tags reported for the current public image
version	Runtime version reported by Docker Scout when available
digest	Digest of the current public image

Relationships

• An ontology Image is built on a DockerScoutPublicImage.

  Matching is done from the Docker Scout Target digest to Image._ont_digest.

  (Image)-[BUILT_ON]->(DockerScoutPublicImage)
  

DockerScoutPublicImageTag

Representation of the current and recommended base image tags parsed from Docker Scout recommendations.

Field	Description
firstseen	Timestamp of when a sync job first discovered this node
lastupdated	Timestamp of the last time the node was updated
id	Unique identifier for the public image tag (format: name:tag)
name	Name of the public image
tag	Tag of the public image
alternative_tags	Alternative tags suggested by Docker Scout for this public image tag
digest	Digest of the public image when Docker Scout reports it
size	Size of the public image
flavor	Flavor of the public image
os	Operating system family inferred from the report
runtime	Runtime version reported by Docker Scout
is_slim	Whether the public image tag is a slim variant

Relationships

• A DockerScoutPublicImage is built from a DockerScoutPublicImageTag.

  (DockerScoutPublicImage)-[BUILT_FROM]->(DockerScoutPublicImageTag)
  

• A DockerScoutPublicImage should update to a DockerScoutPublicImageTag.

  Relationship properties: benefits stores the recommendation bullet list. fix_critical, fix_high, fix_medium, and fix_low store the vulnerability delta by severity.

  (DockerScoutPublicImage)-[SHOULD_UPDATE_TO]->(DockerScoutPublicImageTag)