capabilities.work

Quay Create Repository, Tag Image, and Scan

A 4-step recipe with Red Hat. We can help you get access.

Recipe · 4 steps

Quay Create Repository, Tag Image, and Scan

with Red Hat · Vulnerability Management

Create a repository, set a tag to a manifest, and wait for the security scan.

  1. Create a new container image repository in the supplied namespace with the given visibility.
  2. Read the newly created repository back to confirm it exists and capture its namespace and name. The repository path is the namespace/name pair.
  3. Create or move the tag so it points at the supplied image manifest digest.
  4. Poll the manifest security endpoint. While the scan status is queued or scanning, repeat this step; end once the manifest has been scanned.
What you'll need to have ready
  • token: OAuth bearer token for the Quay API.
  • namespace: The organization or user namespace for the repository.
  • repository: The short name of the repository to create.
  • visibility: Repository visibility, either "public" or "private".
  • description: A description for the repository.
  • tag: The tag name to move onto the manifest.
  • manifestDigest: The image manifest digest the tag should reference.
For your developer

Arazzo workflow red-hat:create-repo-tag-and-scan, 4 operations: createRepository → getRepository → changeTag → getManifestSecurity. Specs on APIs.io.

More recipes with Red Hat

Ansible Automation Platform Build Inventory and TemplateAnsible Automation Platform Launch, Monitor, and Cancel JobAnsible Automation Platform Provision and Run JobInsights Inspect a SystemInsights Triage a Rule's Affected SystemsKeycloak Provision Realm Role and UserKeycloak Upsert a Realm UserOpenShift Configure Cluster Identity ProviderOpenShift Provision Cluster and Add Machine PoolQuay Audit Repository Tags