We have harbor scanning containers before they have been deployed. Once they are scanned, we then deploy them to the platform (k8s).
Is there anyway to scan a container just say a few weeks down the line after it has been deployed? Without disturbing the deployment of course.
Thanks
I think we have to distinguish between a container (the running process) and the image from which a container is created/started.
If this is about finding out which image was used to create a container that is (still) running and to scan that image for (new) vulnerabilities...here is a way to get information about the images of all running containers in a pod:
kubectl get pods <pod-name> -o jsonpath={.status.containerStatuses[*].image}