Low Severity
Published: Oct 25, 2026
Rancher UI extension that shows image vulnerability counts on workload lists.
# Image Vulnerabilities for Rancher
[](https://github.com/thiagoloureiro/rancher-security-chart/releases)
[](https://github.com/thiagoloureiro/rancher-security-chart/actions/workflows/build-extension-charts.yml)
[](https://github.com/thiagoloureiro/rancher-security-chart/actions/workflows/build-extension-catalog.yml)
[](#)
[](https://app.codacy.com/gh/thiagoloureiro/rancher-security-chart/dashboard?utm_source=gh&utm_medium=referral&utm_content=&utm_campaign=Badge_grade)
Rancher UI extension that shows image vulnerability counts on workload lists. It targets Rancher 2.10 or newer.
The extension does not scan images. [Trivy Operator](https://github.com/aquasecurity/trivy-operator) scans the cluster and writes `VulnerabilityReport` resources. This extension reads those reports through the Kubernetes API that Rancher already proxies.
## How it works
Workload tables get a **Vulns** column. That includes Deployments, DaemonSets, StatefulSets, ReplicaSets, Jobs, CronJobs, and Pods. Pods show the scan of the ReplicaSet, StatefulSet, DaemonSet, or Job that owns them.
The column shows critical, high, and medium counts. A scan with none of those findings shows a green **No vulnerabilities** pill. Low and unknown findings are left out. Click a cell to open the CVE list for that image.
Cluster Explorer also has **Container