Quay Audit Repository Tags
A 3-step recipe with Red Hat. We can help you get access.
Recipe · 3 steps
Quay Audit Repository Tags
with Red Hat · Vulnerability Management
Confirm a repository, list tags, and scan the most recent tag's manifest.
- Retrieve the repository to confirm it exists before enumerating its tags. The repository path is the namespace/name pair.
- List the repository's tags, most recent first, and capture the manifest digest of the first returned tag.
- Retrieve the security scan report, including detailed vulnerability information, for the latest tag's manifest.
What you'll need to have ready
- token: OAuth bearer token for the Quay API.
- namespace: The organization or user namespace of the repository.
- repository: The short name of the repository to audit.
- limit: The maximum number of tags to return per page.
For your developer
Arazzo workflow red-hat:audit-repository-tags, 3 operations: getRepository → listRepositoryTags → getManifestSecurity. Specs on APIs.io.