Skip to content

Enable Gitlab Container Scanning

Costel Maxim requested to merge cmaxim_container_scanning into master

What does this MR do?

The purpose of this MR is to enable container scanning once built.

Why was this MR needed?

Trying to go through this list and setup triggers, a trigger token is needed ( it can be found in 1Password- Engineering Vault- Container scanning).
More details can be found in Container Scanning of Production Containers, a compliance requirement to scan images that are used in production.

What's the best way to test this MR?

A scanning job will be triggered in https://gitlab.com/gitlab-com/gl-security/appsec/container-scanners once a new image was built.

Edited by Costel Maxim

Merge request reports