# Vulnerability scanning
Source: https://docs.infraista.com/en/developer-tools/container-registry/vulnerability-scanning



Vulnerability scanning checks your images for known vulnerabilities in OS packages and libraries. It's
off until you turn it on for your organization.

## Turn it on [#turn-it-on]

1. Open **Container Registry** and find **Vulnerability scanning**.
2. Select **Turn on scanning**. The confirmation shows the prices; confirm.
3. In each repository's **Settings**, turn on **Scan on push** for the repositories you want scanned on
   every push.

Owners, admins and members who can manage the registry can turn it on.

## When images are scanned [#when-images-are-scanned]

* **On push**, in repositories with scan on push.
* **On request**: select a tag and **Scan now**.
* **Every week**, each repository's newest tag is scanned again against the latest advisory data, so
  issues published after you pushed still show up.

A scan takes a minute or two.

## Read the results [#read-the-results]

The repository list shows the counts by severity for each repository's newest tag. Select a tag to see
each vulnerability with its CVE, severity, package, installed version and the version that fixes it.
Rebuild the image on an updated base to pick up the fixes.

## Turn it off [#turn-it-off]

Select **Turn off scanning**. No new scans run and nothing more is billed; results of earlier scans
stay visible, and queued scans are dropped.

## Pricing [#pricing]

A number of scans each month are free. After that, each scan on push or on request, and each weekly
rescan, is billed; failed scans aren't. The **Vulnerability scanning** card shows this month's scans,
the free scans left and the cost so far. See your price list in the console for current prices.

For scanning your source code and dependencies before you build, see
[Code Security](/en/developer-tools/code-security).

## Related [#related]

* [Repository settings](/en/developer-tools/container-registry/repository-settings)
* [Storage and billing](/en/developer-tools/container-registry/storage-and-billing)