Vulnerability Intelligence
Version Compare
See exactly what changed between two versions of an image.
On any image detail page, open the Compare tab, pick two versions (defaults to previous → latest), and PodArmor diffs them:
- CVEs resolved — vulnerabilities present in the older version, gone in the newer
- CVEs introduced — new vulnerabilities in the newer version
- Package changes — added / removed / version-bumped packages, from the SBOM
This is the "what changed in this rebuild?" view — the 30-second answer for a change-advisory board before you promote a new tag.
An epoch rebuild (e.g.
r5 → r6) that only absorbs base-OS patches will often show CVEs resolved with zero application-package changes — that's expected and correct.