capabilities.work

Subscribe on Policy Failure

A 2-step recipe with Anchore. We can help you get access.

Recipe · 2 steps

Subscribe on Policy Failure

with Anchore

Evaluate policy on an image and subscribe to policy_eval notifications when it fails the gate.

  1. Evaluate the image against the policy bundle and branch on the final gate action. A "stop" action means the image failed policy.
  2. Create a policy_eval subscription on the image tag so notifications are sent whenever the policy evaluation result changes.
What you'll need to have ready
  • authorization: HTTP Basic authorization header value (e.g. "Basic dXNlcjpwYXNz").
  • imageDigest: The SHA256 digest of the analyzed image to evaluate.
  • tag: Image tag the evaluation and subscription are keyed to.
  • policyId: Optional policy bundle id to evaluate against.
For your developer

Arazzo workflow anchore:subscribe-on-policy-failure, 2 operations: checkImagePolicy → createSubscription. Specs on APIs.io.