Skip to content

Commit 1797ab0

Browse files
committed
Add NeuVector scanner GitLab sample
1 parent 99d603d commit 1797ab0

1 file changed

Lines changed: 33 additions & 0 deletions

File tree

docs/companies/suse/neuvector.md

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1 +1,34 @@
11
# NeuVector
2+
3+
## Scanner in CI pipelines
4+
5+
### GitLab
6+
7+
Updates from [plugin](https://gitlab.com/neuvector/gitlab-plugin) (MR are not looked at...):
8+
9+
* Scan a private registry
10+
11+
```yaml
12+
# GitLab Project > Settings > CI/CD > Variables > CONTAINER_REGISTRY_USER & IMAGE_REGISTRY_PASSWORD
13+
14+
include:
15+
- remote: 'https://gitlab.com/neuvector/gitlab-plugin/-/raw/master/scan.yml'
16+
17+
stages:
18+
- scan
19+
20+
neuvector_scan:
21+
stage: scan
22+
variables:
23+
image_registry_url: "https://registry-1.docker.io"
24+
image_registry_user: $CONTAINER_REGISTRY_USER
25+
image_registry_password: $IMAGE_REGISTRY_PASSWORD
26+
image_repo: "library/alpine"
27+
image_tag: "3.6"
28+
nv_registry_user: $CONTAINER_REGISTRY_USER
29+
nv_registry_password: $IMAGE_REGISTRY_PASSWORD
30+
scan_layers: "false"
31+
high_vul_to_fail: 5
32+
medium_vul_to_fail: 9
33+
vul_names_to_fail: "CVE-2020-1971, CVE-2020-1972"
34+
```

0 commit comments

Comments
 (0)