Find which of your images have critical CVEs

Per image

chainctl images advisories list <image-reference> [--platform=linux/amd64] [--status=fixed,detected] [-o json]

Columns: PACKAGE, VERSION, ADVISORY (CGA ID), ALIASES (CVE/GHSA), STATUS. This requires the advisories.list capability (the advisories.viewer role).

In the Console

The image Vulnerabilities tab shows a Severity column and a search box. For a single image by digest, the API path is GET /registry/v1/repos/{REPO}/digests/{DIGEST}/vulnreport.