Where does the data come from that Lacework uses to scan for vulnerabilities?

For both hosts and containers, a scan is performed against the source which generates a manifest.json that contains all the package data for either the host or container image.

Host:

• Agents
• Agentless

Container:

• Platform Scanner
• Proxy Scanner
• Inline Scanner
• Agentless Workload Scanner

Container registry and images within it can be scanned by all of the above container options.