Skip to content

Use security policy bot for Container scanning for registry job

What does this MR do and why?

  1. Use security policy bot for Container scanning for registry job.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Screenshot_2024-10-24_at_5.15.09_PM

How to set up and validate locally

  1. Enable container scanning for registry feature from security settings.
  2. Push a container image with latest tag.
  3. After a minute, a pipeline will start.
  4. Pipeline should be started as bot user.

Alternative way to test:

Run following code in console

 AppSec::ContainerScanning::ScanImageService.new(
   image: 'registry.gitlab.com/atiwari71/container-scanning-test/alpine1-main:07ed52de64553270a76a364d0ce15b3e89988901',
   project_id: Project.last.id
 ).execute

https://gitlab.com/gitlab-org/gitlab/-/issues/481959

Edited by Aditya Tiwari

Merge request reports

Loading