Skip to content

Add setting for enabling CS for Registry

Aditya Tiwari requested to merge 443620-add-cs-pipeline-event into master

What does this MR do and why?

Proposal: Schedule a container scanning pipeline whenever a container registry push event is triggered.

Adds an event that is trigerred whenever a new image is added to the registry. The event schedules a container scanning pipeline on default branch to scan the newly pushed image.

Steps to test:

  1. Enable the security_setting container_scanning_for_registry for the project
    1. Use project.security_setting.set_container_scanning_for_registry!(enabled: true)
  2. Enable FF container_sacnning_for_registry
  3. Push a new image to the registry for that project.
  4. After a minute, it should schedule a CS job for that image.

Related to #443620 (closed)

Edited by Aditya Tiwari

Merge request reports