Skip to content

Add Grype support for CS_REGISTRY_INSECURE

Why is this change being made?

Grype as of version 0.16.0 includes support for connecting to docker registries using http. This adds support for this configuration option.

NOTE: This is dependent on upgrading Grype to 0.16.0: !2579 (merged)

ALSO NOTE: When this is merged, the container scanning documentation should be updated to reflect this -- specifically: the CS_REGISTRY_INSECURE entry has the text "Trivy. The registry must listen on port 80/tcp.", this is now applicable to "All" scanners. I have a draft merge request for this minor text change here: gitlab-org/gitlab!68902 (merged)

Edited by Keith Zantow

Merge request reports