File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11# NeuVector
2+
3+ ## Scanner in CI pipelines
4+
5+ ### GitLab
6+
7+ Updates from [ plugin] ( https://gitlab.com/neuvector/gitlab-plugin ) (MR are not looked at...):
8+
9+ * Scan a private registry
10+
11+ ``` yaml
12+ # GitLab Project > Settings > CI/CD > Variables > CONTAINER_REGISTRY_USER & IMAGE_REGISTRY_PASSWORD
13+
14+ include :
15+ - remote : ' https://gitlab.com/neuvector/gitlab-plugin/-/raw/master/scan.yml'
16+
17+ stages :
18+ - scan
19+
20+ neuvector_scan :
21+ stage : scan
22+ variables :
23+ image_registry_url : " https://registry-1.docker.io"
24+ image_registry_user : $CONTAINER_REGISTRY_USER
25+ image_registry_password : $IMAGE_REGISTRY_PASSWORD
26+ image_repo : " library/alpine"
27+ image_tag : " 3.6"
28+ nv_registry_user : $CONTAINER_REGISTRY_USER
29+ nv_registry_password : $IMAGE_REGISTRY_PASSWORD
30+ scan_layers : " false"
31+ high_vul_to_fail : 5
32+ medium_vul_to_fail : 9
33+ vul_names_to_fail : " CVE-2020-1971, CVE-2020-1972"
34+ ` ` `
You can’t perform that action at this time.
0 commit comments