Mantieni tutto organizzato con le raccolte
Salva e classifica i contenuti in base alle tue preferenze.
Questo documento descrive come attivare le API per prodotti e funzionalità che
contribuiscono a proteggere la tua catena di fornitura software.
Per raccogliere e visualizzare gli approfondimenti sulla catena di fornitura software, devi abilitare le seguenti API:
API Artifact Analysis per archiviare i metadati generati e utilizzati da altri serviziGoogle Cloud .
API Container Scanning per analizzare le immagini container archiviate in Artifact Registry
per rilevare vulnerabilità e altri metadati. L'abilitazione di questa API
abilita automaticamente l'API Artifact Analysis.
Artifact Registry per archiviare gli artefatti della build.
Cloud Build per generare i metadati di provenienza della build.
(Solo GKE) API Container Security per analizzare i workload in esecuzione per rilevare vulnerabilità del sistema operativo.
Devi eseguire l'API Container Scanning nello stesso progetto Google Clouddi Artifact Registry. Puoi eseguire altri servizi Google Cloud che utilizzano
il registro in progetti separati.
Abilitare le API richieste per gli approfondimenti
Per abilitare le API necessarie per generare e visualizzare gli approfondimenti:
Abilita Container Scanning e Artifact Registry nel progetto in cui vuoi eseguire Artifact Registry. Sostituisci AR_PROJECT con
l'ID progetto Google Cloud appropriato.
Hai attivato le API minime richieste per generare e visualizzare gli approfondimenti nei
riquadri della consoleGoogle Cloud e nella dashboard
di postura di sicurezza GKE.
[[["Facile da capire","easyToUnderstand","thumb-up"],["Il problema è stato risolto","solvedMyProblem","thumb-up"],["Altra","otherUp","thumb-up"]],[["Difficile da capire","hardToUnderstand","thumb-down"],["Informazioni o codice di esempio errati","incorrectInformationOrSampleCode","thumb-down"],["Mancano le informazioni o gli esempi di cui ho bisogno","missingTheInformationSamplesINeed","thumb-down"],["Problema di traduzione","translationIssue","thumb-down"],["Altra","otherDown","thumb-down"]],["Ultimo aggiornamento 2025-09-04 UTC."],[],[],null,["# Enable services\n\nThis document describes how to enable APIs for products and features that\nhelp to protect your software supply chain.\n\nTo collect and view software supply chain insights, you must enable the\nfollowing APIs:\n\n- Artifact Analysis API to store metadata that other Google Cloud services generate and use.\n- Container Scanning API to scan container images stored in Artifact Registry for vulnerabilities and other metadata. Enabling this API automatically enables the Artifact Analysis API.\n- Artifact Registry to store your build artifacts.\n- Cloud Build to generate build provenance metadata.\n- (GKE only) Container Security API to scan running workloads for OS vulnerabilities.\n\nYou must run the Container Scanning API in the same Google Cloud\nproject as Artifact Registry. You can run other Google Cloud services that use\nthe registry in separate projects.\n\nEnable APIs required for insights\n---------------------------------\n\nTo enable APIs required to generate and view insights: \n\n### Console\n\n**Use all services in the same project**\n\nEnable the required APIs together.\n\n\n[Enable the APIs](https://console.cloud.google.com/flows/enableapi?apiid=containerscanning.googleapis.com,cloudbuild.googleapis.com,artifactregistry.googleapis.com,containersecurity.googleapis.com)\n\n\u003cbr /\u003e\n\n**Use separate projects**\n\n1. Enable Container Scanning and Artifact Registry in the project where you want\n to run Artifact Registry.\n\n\n [Enable the APIs](https://console.cloud.google.com/flows/enableapi?apiid=containerscanning.googleapis.com,artifactregistry.googleapis.com)\n\n \u003cbr /\u003e\n\n2. Enable the Cloud Build API in projects where you are running\n Cloud Build.\n\n [Enable Cloud Build](https://console.cloud.google.com/flows/enableapi?apiid=cloudbuild.googleapis.com)\n3. Enable the Container Security API in projects where you are running\n GKE.\n\n [Enable Container Security](https://console.cloud.google.com/flows/enableapi?apiid=containersecurity.googleapis.com)\n\n### Google Cloud CLI\n\n**Use all services in the same project**\n\nEnable the required APIs together. \n\n gcloud services enable containerscanning.googleapis.com \\\n cloudbuild.googleapis.com \\\n artifactregistry.googleapis.com \\\n containersecurity.googleapis.com\n\n**Use separate projects**\n\n1. Enable Container Scanning and Artifact Registry in the project where you want\n to run Artifact Registry. Replace \u003cvar translate=\"no\"\u003eAR_PROJECT\u003c/var\u003e with\n the appropriate Google Cloud project ID.\n\n gcloud services enable containerscanning.googleapis.com \\\n artifactregistry.googleapis.com \\\n --project=\u003cvar translate=\"no\"\u003eAR_PROJECT\u003c/var\u003e\n\n2. Enable the Cloud Build API in projects where you are running\n Cloud Build. Replace \u003cvar translate=\"no\"\u003eBUILD_PROJECT\u003c/var\u003e with\n the appropriate Google Cloud project ID.\n\n gcloud services enable cloudbuild.googleapis.com \\\n --project=\u003cvar translate=\"no\"\u003eBUILD_PROJECT\u003c/var\u003e\n\n3. Enable the Container Security API in projects where you are running\n GKE. Replace \u003cvar translate=\"no\"\u003eGKE_PROJECT\u003c/var\u003e with\n the appropriate Google Cloud project ID.\n\n gcloud services enable containersecurity.googleapis.com \\\n --project=\u003cvar translate=\"no\"\u003eGKE_PROJECT\u003c/var\u003e\n\nYou have enabled the minimum required APIs to generate and view insights in\nGoogle Cloud console panels and in the GKE\nsecurity posture dashboard.\n\nYou can enable APIs for other services from the [API\nlibrary](https://console.cloud.google.com/apis/library) or with the [gcloud services\nenable](/sdk/gcloud/reference/services/enable) command.\n\nWhat's next\n-----------\n\n- Learn about the [IAM permissions](/software-supply-chain-security/docs/configure-access) that are required to view security insights.\n- Learn more about software supply chain security in the [overview](/software-supply-chain-security/docs/overview)\n- Learn about [software supply chain security practices](/software-supply-chain-security/docs/practices) and how Google Cloud products help you to implement them."]]
