<p>We have harbor scanning containers before they have been deployed. Once they are scanned, we then deploy them to the platform (k8s).</p>

<p>Is there anyway to scan a container just say a few weeks down the line after it has been deployed? Without disturbing the deployment of course.</p>

<p>Thanks</p>

<p>I think we have to distinguish between a container (the running process) and the image from which a container is created/started.</p>

<p>If this is about finding out which image was used to create a container that is (still) running and to scan that image for (new) vulnerabilities...here is a way to get information about the images of all running containers in a pod:</p>

<pre><code>kubectl get pods &lt;pod-name&gt; -o jsonpath={.status.containerStatuses[*].image}
</code></pre>
