Scanning process

The scanner receives scan jobs through the image handler. The image handler is a module deployed in the Kaspersky Container Security infrastructure that forwards scan jobs to the scanner and receives the scan results from the scanner.

The scan job queue includes all forwarded scan jobs and is generated in the following cases:

The object of a scan job can be an image, a node, or an artifact (in CI/CD).

Jobs in the scan queue receive the following statuses:

Pending — status assigned by default when a job is created.
In progress — the job is being processed by the image handler.
Parsing results — the solution processes the job scanning results to display them in the interface.
Error— scan job failed.
Finished — the results of the scan job are available.

Scan jobs from the queue are submitted to the image handler in the order of their receipt. A scan job then goes to a scanner with Free status and is scanned for security issues. The scan results are sent back to the image handler. The scan job is considered completed and finished if scanning results are received. If a scan job was performed three or more times but received no results, the scan job is given the Error status.

When scanning many large objects, the solution may be slower to display scan results in the user interface. You may have to wait up to several minutes for the results to appear. During this time, the scan jobs are displayed in the Scanners section with the Parsing results status.

If you want to speed up the processing of scan results, you can allocate more resources to the scan job handler by updating the variables in Helm Chart (for more details, see Scaling).

When an error occurs, the solution displays an error message that consists of a code and a text message (for example, HNDL-004: scan time out).

Error messages are displayed in English.

The following table lists examples of possible error messages when running scan jobs.

Scan error messages and their meanings

Error message	Meaning of the message
HNDL-001: mdw adapter send status	Failed to send the status or result of the scan, received an error message as a response from the receiving server
HNDL-003: scanner config invalid	Scanner settings are missing or incorrect
HNDL-004: scan time out	The scanning process finished because the scan result was not received within the time limit or the scan job timed out
HNDL-005: scan params empty	Scan job parameters missing or incorrect
HNDL-006: `<message text>`	Error while running a subprocess or command with a description
HNDL-007: `<message text>`	Unexpected system error with description
HNDL-008: job id empty	Invalid scan job ID
HNDL-011: proxy URL invalid	Invalid proxy server URL
HNDL-012: last release date of databases is unknown	Anti-malware database release date not set
HNDL-013: invalid format of databases release date	The format of the anti-malware database release date is invalid
HNDL-014: scanner policies empty	Scanner policy is not set
HNDL-015: can not get local timezone	Could not determine the current time zone of the solution

After scanning, the solution displays the scan results. If security threats are detected in an object, Kaspersky Container Security prompts you to perform one of the following actions:

Delete the security threat.
Accept the risk.

Page top