Description
When querying the LW_HE_IMAGES LQL data source, the IMAGE_VERSION field is returned. The value returned may be the same for all images and/ or not have any specific correlation to the images from a user perspective.
For example:
Explanation
The IMAGE_VERSION field is related to the container runtime CLI (runc) on the container/ machine where the image is running. You can verify this by running the following command on the active container where the image is deployed and verifying the "spec" value:
runc -version
On an example EC2 AWS Linux 2 based image where runc is installed, this command returns the following:
This can be seen on the LQL query results for a range of images all running on such an environment: