GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit
look at checking if there is a way to get workload Artifact Registry vulnerability checks alongside the infrastructure vulnerability tab results already in SCC-P
- Dominant language
- Shell
- Stars
- 36
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
Michael will look at checking if there is a way to get workload AR vulnerability checks alongside the infrastructure vulnerability tab results already in SCC-P
Add (for example Traffic Generation - canary container - https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/blob/main/docs/google-cloud-landingzone-traffic-generation.md)
https://console.cloud.google.com/artifacts/docker/magellan-01/northamerica-northeast1/traffic-generation/traffic-generation/
to
https://console.cloud.google.com/security/command-center/vulnerabilities
Artifact Registry scanning of cloud build targeted container

SCC (non-premium has the vulnerabilities tab - but not compliance or threats

Enumerate rest and gcloud apis
https://cloud.google.com/artifact-registry/docs/reference/rest
https://cloud.google.com/security-command-center/docs/reference/rest
Contributor guide
Assessment
This issue has not been assessed yet.