From 815eeb087b8d959edd153a9253e508f65928720f Mon Sep 17 00:00:00 2001 From: Amber Alston Date: Thu, 23 Jul 2026 15:17:40 -0600 Subject: [PATCH] Soften Security Center "continuous" scanning language The "How CVE scanning works" section claimed every image is scanned "continuously," which reads as real-time and overstates the behavior. Scanning actually runs on a recurring schedule with variable frequency: newly promoted images are scanned right away, and previously scanned images are rescanned periodically, more often for recently promoted images than for older ones. Reword to describe a recurring schedule without committing to the exact cadence, which may change. Keeps the honest, valuable point that CVEs surface after release without requiring a new release. Co-Authored-By: Claude Opus 4.8 --- docs/vendor/security-center-about.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/vendor/security-center-about.mdx b/docs/vendor/security-center-about.mdx index 35e74a7e48..3df1b067e1 100644 --- a/docs/vendor/security-center-about.mdx +++ b/docs/vendor/security-center-about.mdx @@ -47,7 +47,7 @@ You can explicitly include or exclude images from being scanned by the Security ### How cve scanning works -The Security Center is powered by Replicated's [SecureBuild](https://securebuild.com/) technology. With SecureBuild, every image is scanned continuously (not just at release time) using the open source vulnerability scanner [Grype](https://github.com/anchore/grype). This means that, as new CVEs are disclosed, they automatically appear in your Security Center without requiring a new release. +The Security Center is powered by Replicated's [SecureBuild](https://securebuild.com/) technology. With SecureBuild, images are scanned on a recurring schedule using the open source vulnerability scanner [Grype](https://github.com/anchore/grype), not only at release time. Newly promoted images are scanned as soon as they are identified, and previously scanned images are rescanned periodically, with more recently promoted images scanned more frequently than older ones. This means that, as new CVEs are disclosed, they surface in your Security Center over time without requiring a new release. The following describes the Security Center CVE scanning process: