Image Compliance Gate
A 4-step recipe with Aqua Security. We can help you get access.
Recipe · 4 steps
Image Compliance Gate
with Aqua Security
Poll an image scan and pass or fail a gate based on critical and high vulnerability counts.
- Authenticate the user and obtain a JWT bearer token for the scan calls.
- Read the image detail and loop until the scan reaches a terminal completed or failed state, capturing the vulnerability counts.
- The image carries critical or high vulnerabilities. Re-read the image detail to record the failing posture and end the workflow as failed.
- The image is free of critical and high vulnerabilities. Re-read the image detail to record the passing posture.
What you'll need to have ready
- id: Aqua username or user ID used to authenticate.
- password: Aqua user password used to authenticate.
- registry: Registry name of the image to gate (e.g. docker-hub).
- image_name: Image repository name to gate (e.g. nginx).
- image_tag: Image tag to gate (e.g. latest).
For your developer
Arazzo workflow aqua-security:image-compliance-gate, 4 operations: login → getImage → getImage → getImage. Specs on APIs.io.