Description

When querying the LW_HE_IMAGES LQL data source, the IMAGE_VERSION field is returned. The value returned may be the same for all images and/ or not have any specific correlation to the images from a user perspective. 

For example:

Explanation

The IMAGE_VERSION field is related to the container runtime CLI (runc) on the container/ machine where the image is running. You can verify this by running the following command on the active container where the image is deployed and verifying the "spec" value:
 

runc -version

 
On an example EC2 AWS Linux 2 based image where runc is installed, this command returns the following:
 

This can be seen on the LQL query results for a range of images all running on such an environment: