GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit

look at checking if there is a way to get workload Artifact Registry vulnerability checks alongside the infrastructure vulnerability tab results already in SCC-P

Open
#165 1 comment 0 reactions 1 assignee Claimed by @fmichaelobrien View on GitHub
automation developer-experience
Dominant language
Shell
Stars
36
Forks
26
PR merge metrics
No merged PRs in 30d

Description

Michael will look at checking if there is a way to get workload AR vulnerability checks alongside the infrastructure vulnerability tab results already in SCC-P

Add (for example Traffic Generation - canary container - https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/blob/main/docs/google-cloud-landingzone-traffic-generation.md)
https://console.cloud.google.com/artifacts/docker/magellan-01/northamerica-northeast1/traffic-generation/traffic-generation/

to

https://console.cloud.google.com/security/command-center/vulnerabilities

Artifact Registry scanning of cloud build targeted container
Screen Shot 2022-11-02 at 3 31 42 PM

SCC (non-premium has the vulnerabilities tab - but not compliance or threats
Screen Shot 2022-11-02 at 3 31 53 PM

Enumerate rest and gcloud apis
https://cloud.google.com/artifact-registry/docs/reference/rest
https://cloud.google.com/security-command-center/docs/reference/rest

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.