Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[GCP Artifact Registry] Docker component scan and Clair services should be able to scan images from Artifact Registry #3925

Open
mzueva opened this issue Feb 25, 2025 · 0 comments
Assignees
Labels
kind/enhancement New feature or request

Comments

@mzueva
Copy link
Collaborator

mzueva commented Feb 25, 2025

Background
Docker component scan is a service responsible for scanning docker images for various components: OS, software, python and R packages, etc. Clair service is a service for scanning docker images for vulnerabilities. Docker image scan can be triggered from API in two ways:

  • scheduled image scanning (see ToolScanScheduler.java)
  • and API call (see ToolController.java)
    In both cases sever will perform several checks and get vulnerability data from Clair service and components data from Docker component scan service.

Approach
Docker image scanning should work properly for images from docker registry with provider=GCP. Keep in mind that scanning may take a long time (up to several hours), so we need to ensure that token passed for authorization will be valid or use some other approach for authorization.

@mzueva mzueva added the kind/enhancement New feature or request label Feb 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants