DemandFlow Support Centre

DOCKERIMAGE: Docker Image

ReferenceEntity Reference16/04/2026Updated 16/04/2026
A Docker container image with its tag, build configuration, security scan results, and deployment tracking across environments.

DOCKERIMAGE: Docker Image

A Docker container image with its tag, build configuration, security scan results, and deployment tracking across environments.

Default definition. This article describes the default DOCKERIMAGE definition shipped with DemandFlow. Administrators can add, remove, rename, or re-type fields, change which ones are required, and alter the layout from the Definitions screen in Settings. Your tenant's current schema may differ from what is shown here. To read the current definition at any time, GET the DEFINITION object whose id matches DOCKERIMAGE.

Entity properties

PropertyValue
Entity codeDOCKERIMAGE
Display nameDocker Image
PluralDocker Images
Level420

Use cases

DOCKERIMAGE is the container image catalogue entry. It captures the image name, tag, registry (objectLookup to DOCKERREGISTRY), full qualified name, and SHA256 digest. Image Details records description, base image lineage, architecture multiselect (amd64, arm64, etc.), OS, size, and layer count -- metadata essential for multi-arch builds and image optimisation. Status tracks the image lifecycle (Active, Deprecated, Archived, Building, Failed, Scanning) with timestamps for creation, push, and last pull plus usage counters. The Build panel stores the Dockerfile content alongside build arguments, context, target stage, platform targets, and cache sources, making the image reproducible without access to the source repo. Configuration captures runtime defaults (entrypoint, cmd, working dir, user, shell, env vars, exposed ports, volumes, healthcheck) as defined in the image. Labels and Metadata stores OCI labels, maintainer, vendor (objectLookup to VEN), version, and license. Security provides vulnerability scanning results with severity breakdown (critical/high/medium/low), signature verification, trusted registry status, and compliance classification. Dependencies records runtime dependencies, installed packages, linked services, and config requirements. The Deployments related-list links to K8SWORKLOAD by container image, showing where the image is running. Tags & Versions provides tag history and auto-tagging configuration. CI/CD tracks the build pipeline, git source, triggers, and build history. Monitoring captures pull rate, storage, network transfer, and cache efficiency.

Fields

Image Information

FieldTypeRequiredNotes
nametextYese.g., nginx, redis, mysql
tagtextYese.g., latest, 1.21.0, stable
registryreference → DOCKERREGISTRYRegistry.
fullImageNametextregistry/namespace/name:tag Read only.
imageIdtextSHA256 digest Read only.

Image Details

FieldTypeRequiredNotes
descriptiontext (multi-line)Image purpose and contents
baseImagetextParent image
architecturemultiselectArchitecture.
osenumValid ids: 1 (linux), 2 (windows), 3 (darwin).
sizenumberSize (MB). Read only.
layersnumberLayers. Read only.

Status & Usage

FieldTypeRequiredNotes
statusenumYesValid ids: 1 (Active), 2 (Deprecated), 3 (Archived), 4 (Building), 5 (Failed), 6 (Scanning).
createdDatedatetimeCreated Date. Read only.
pushedDatedatetimePushed Date. Read only.
lastPulleddatetimeLast Pulled. Read only.
pullCountnumberPull Count. Read only.
deploymentCountnumberActive Deployments. Read only.
targetClusterreference → K8SCLUSTERTarget Cluster.
targetNamespacereference → K8SNAMESPACETarget Namespace.

Dockerfile

FieldTypeRequiredNotes
dockerfiletext (multi-line)Dockerfile content
dockerfilePathtextPath in repository

Build Configuration

FieldTypeRequiredNotes
buildArgstext (multi-line)ARG key=value pairs
buildContexttextBuild context path
targetStagetextMulti-stage build target
buildPlatformstext (multi-line)Target platforms for multi-arch
cacheFromtext (multi-line)Images to use as cache

Runtime Configuration

FieldTypeRequiredNotes
entrypointtextContainer entrypoint
cmdtextDefault command
workingDirtextWorking Directory.
usertextRun as user
shelltextDefault shell

Environment & Ports

FieldTypeRequiredNotes
envtext (multi-line)Default ENV vars (JSON)
exposedPortstext (multi-line)Container ports (JSON)
volumestext (multi-line)Volume mount points
healthchecktext (multi-line)Health check configuration (JSON)

Image Labels

FieldTypeRequiredNotes
labelstext (multi-line)Image labels (JSON)
annotationstext (multi-line)Additional metadata (JSON)
maintainertextMaintainer.
vendorreference → VENVendor.
versiontextVersion.
licensetextLicense.

Security Scanning

FieldTypeRequiredNotes
scanEnabledbooleanSecurity Scan Enabled.
lastScanDatedatetimeLast Scan Date. Read only.
vulnerabilitiestext (multi-line)Known vulnerabilities (JSON) Read only.
criticalCountnumberCritical. Read only.
highCountnumberHigh. Read only.
mediumCountnumberMedium. Read only.
lowCountnumberLow. Read only.

Security Configuration

FieldTypeRequiredNotes
signatureVerifiedbooleanSignature Verified. Read only.
signedBytextSigned By. Read only.
trustedRegistrybooleanFrom Trusted Registry.
complianceStatusenumValid ids: 1 (Compliant), 2 (Non-compliant), 3 (Exempt), 4 (Unknown).
securityPoliciestext (multi-line)Applied security policies
allowedNamespacesmultiselectAllowed Namespaces.

Image Dependencies

FieldTypeRequiredNotes
dependenciestext (multi-line)Required runtime dependencies
packagestext (multi-line)Package list from scan Read only.
linkedServicesmultiselectRequired external services
configRequirementstext (multi-line)Required configs/secrets

Version History

FieldTypeRequiredNotes
tagHistorytext (multi-line)Historical tags for this image Read only.
latestTagtextLatest Tag. Read only.
stableTagtextStable Tag. Read only.
developmentTagtextDevelopment Tag. Read only.
autoTagbooleanAuto-tagging Enabled.
tagPatterntextSemantic versioning pattern

Build Pipeline

FieldTypeRequiredNotes
gitRepotext (URL)Git Repository.
gitBranchtextGit Branch.
gitCommittextGit Commit. Read only.
buildPipelinetextBuild Pipeline.
buildTriggerenumValid ids: 1 (Manual), 2 (Git Push), 3 (Pull Request), 4 (Schedule), 5 (Webhook).

Build History

FieldTypeRequiredNotes
lastBuildTimedatetimeLast Build. Read only.
lastBuildStatusenumValid ids: 1 (Success), 2 (Failed), 3 (In Progress), 4 (Cancelled).
buildDurationnumberBuild Duration (min). Read only.
buildCountnumberTotal Builds. Read only.
buildHistorytext (multi-line)Build History. Read only.

Usage Metrics

FieldTypeRequiredNotes
pullRatenumberPull Rate (per day). Read only.
storageUsednumberStorage Used (MB). Read only.
networkTransfernumberNetwork Transfer (GB). Read only.
cacheHitRategaugeCache Hit Rate %. Read only.
avgPullTimenumberAvg Pull Time (sec). Read only.
avgBuildTimenumberAvg Build Time (min). Read only.
failureRategaugeFailure Rate %. Read only.
availabilitygaugeAvailability %. Read only.

Relationships

  • Lookup: registry (reference → DOCKERREGISTRY).
  • Lookup: targetCluster (reference → K8SCLUSTER).
  • Lookup: targetNamespace (reference → K8SNAMESPACE).
  • Lookup: vendor (reference → VEN).
  • Related list: K8SWORKLOAD, related list.

Creating a Docker Image via the API

POST /v1/objects
Authorization: Bearer <your-pat>
Content-Type: application/json

{
  "entity":   "DOCKERIMAGE",
  "level":    420,
  "comboKey": "SUB:<your-sub-id>|ENT:",
  "name": "Example name",
  "tag": "Example value",
  "status": "1",
  "description": "Example value"
}

Listing Docker Images records

GET /v1/entities/DOCKERIMAGE/SUB:<your-sub-id>

See also

dockerimagedockerimageimagescontainerwithbuildconfigurationsecurityscan

Was this article helpful?

← Back to Knowledge Base