capabilities.work

Analyze Image End to End

A 4-step recipe with Anchore. We can help you get access.

Recipe · 4 steps

Analyze Image End to End

with Anchore · Vulnerability Management

Add an image, wait for analysis, then read vulnerabilities and policy result.

  1. Submit the image tag for analysis. Anchore queues the analysis and returns the image record(s) with an initial analysisStatus.
  2. Poll the image record until the analysisStatus leaves the in-progress states. Branch to the vulnerability read on success or end on failure.
  3. Retrieve the vulnerability report for the analyzed image digest, forcing a fresh evaluation against the latest feed data.
  4. Evaluate the analyzed image against the policy bundle to obtain the final gate action (stop, warn, or go).
What you'll need to have ready
  • authorization: HTTP Basic authorization header value (e.g. "Basic dXNlcjpwYXNz").
  • tag: Image tag to analyze (e.g. docker.io/library/nginx:latest).
  • dockerfile: Optional base64-encoded Dockerfile content to include in analysis.
  • vtype: Vulnerability type to report (os, non-os, or all). Defaults to all.
  • policyId: Optional policy bundle id to evaluate against.
For your developer

Arazzo workflow anchore:analyze-image-end-to-end, 4 operations: addImage → getImage → getImageVulnerabilities → checkImagePolicy. Specs on APIs.io.

More recipes with Anchore

Create Policy and Evaluate ImageImage SBOM and Vulnerability PullRegistry Image OnboardingRescan Active Image and GateSubscribe on Policy Failure