# Retrieving the findings for enhanced scans in Amazon ECR
<a name="image-scanning-enhanced-describe-scan-findings"></a>

You can retrieve the scan findings for the last completed enhanced image scan, and then open the findings in Amazon Inspector to see more detail. The software vulnerabilities that were discovered are listed by severity based on the Common Vulnerabilities and Exposures (CVEs) database.

For troubleshooting details for some common issues when scanning images, see [Troubleshooting image scanning in Amazon ECR](image-scanning-troubleshooting.md).

------
#### [ Amazon Web Services Management Console ]

Use the following steps to retrieve image scan findings using the Amazon Web Services Management Console.

**To retrieve image scan findings**

1. Open the Amazon ECR console at [https://console.amazonaws.cn/ecr/](https://console.amazonaws.cn/ecr/).

1. From the navigation bar, choose the Region where your repository exists.

1. In the navigation pane, choose **Repositories** .

1. On the **Repositories** page, choose the repository that contains the image to retrieve the scan findings for.

1. On the **Images** page, under the **Image tag** column, select the image tag to retrieve the scan findings.

1. To view more details in the Amazon Inspector console, choose the vulnerability name in the **Name** column.

------
#### [ Amazon CLI ]

Use the following Amazon CLI command to retrieve image scan findings using the Amazon CLI. You can specify an image using the `imageTag` or ` imageDigest`, both of which can be obtained using the [list-images](https://docs.amazonaws.cn/cli/latest/reference/ecr/list-images.html) CLI command.
+ [ describe-image-scan-findings](https://docs.amazonaws.cn/cli/latest/reference/ecr/describe-image-scan-findings.html) (Amazon CLI)

  The following example uses an image tag.

  ```
  aws ecr describe-image-scan-findings \
       --repository-name {{name}} \
       --image-id imageTag={{tag_name}} \
       --region {{us-east-2}}
  ```

  The following example uses an image digest.

  ```
  aws ecr describe-image-scan-findings \
       --repository-name {{name}} \
       --image-id imageDigest={{sha256_hash}} \
       --region {{us-east-2}}
  ```

------