The safeguards map / 4.3 Clocks, notification and correction
Eraser
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A Kubernetes tool that removes non-running container images from cluster nodes, using vulnerability data to decide which images to delete.
Where it sits
4.3 Clocks, notification and correction (primary): Removes non-running images from every node of a cluster, deleting an image when it meets criteria such as a known vulnerability.
Eraser uses vulnerability data to remove non-running images from all Kubernetes nodes in a cluster.
captured
Eraser aims to provide a simple way to determine the state of an image, and delete it if it meets the specified criteria.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- at runtime
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Collector's note
In 4.3 as correction after the fact: removing images found vulnerable. It acts on images that are not running, so it does not stop a running workload.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.