You may notice a difference between the number of assets displayed in the Discovery UI and those appearing in CSP Compliance Manager. This occurs because:

• Discovery plug-ins return all scan results to the Runner, even if the PEM (e.g., for a certificate or key) cannot be retrieved.
• The CSP Compliance Manager only accepts assets that include a valid PEM. Assets without a PEM are not sent to CSP Compliance Manager by the Runner.

As a result, the asset count in CSP Compliance Manager may be lower than what is reported in the Discovery UI.

A successful scan may fail at the end with the error "Failed to process container logs: io: read/write on closed pipe." It will show an error with 0 results even if assets were found.