gcloud artifacts docker images scan

NAME

gcloud artifacts docker images scan - perform a vulnerability scan on a container image

SYNOPSIS

gcloud artifacts docker images scan RESOURCE_URI [--additional-package-types=[ADDITIONAL_PACKAGE_TYPES,…]] [--async] [--location=LOCATION; default="us"] [--remote] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

You can scan a container image in a Google Cloud registry (Artifact Registry or Container Registry), or a local container image.

Reference an image by tag or digest using any of the formats:

Artifact Registry:
  LOCATION-docker.pkg.dev/PROJECT-ID/REPOSITORY-ID/IMAGE[:tag]
  LOCATION-docker.pkg.dev/PROJECT-ID/REPOSITORY-ID/IMAGE@sha256:digest

Container Registry:
  [LOCATION.]gcr.io/PROJECT-ID/REPOSITORY-ID/IMAGE[:tag]
  [LOCATION.]gcr.io/PROJECT-ID/REPOSITORY-ID/IMAGE@sha256:digest

Local:
  IMAGE[:tag]

EXAMPLES

Start a scan of a container image stored in Artifact Registry:

gcloud artifacts docker images scan us-west1-docker.pkg.dev/my-project/my-repository/busy-box@sha256:abcxyz --remote

Start a scan of a container image stored in the Container Registry, and perform the analysis in Europe:

gcloud artifacts docker images scan eu.gcr.io/my-project/my-repository/my-image:latest --remote --location=europe

Start a scan of a container image stored locally, and perform the analysis in Asia:

gcloud artifacts docker images scan ubuntu:latest --location=asia

POSITIONAL ARGUMENTS

RESOURCE_URI

A container image in a Google Cloud registry (Artifact Registry or Container Registry), or a local container image.

FLAGS

--additional-package-types=[ADDITIONAL_PACKAGE_TYPES,…]

A comma-separated list of package types to scan in addition to OS packages. ADDITIONAL_PACKAGE_TYPES must be one of:

GO

Go standard library and third party packages.

MAVEN

Maven package.

--async

Return immediately, without waiting for the operation in progress to complete.

--location=LOCATION; default="us"

The API location in which to perform package analysis. Consider choosing a location closest to where you are located. Proximity to the container image does not affect response time. LOCATION must be one of:

asia

Perform analysis in Asia

europe

Perform analysis in Europe

us

Perform analysis in the US

--remote

Whether the container image is located remotely or on your local machine.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This variant is also available:

gcloud beta artifacts docker images scan