推送到工件存储库未触发 GCP 容器扫描

Question

Even though the Container Scanning API is enabled and Vulnerability scanning is enabled for the Artifact Registry, newly pushed images are not being scanned.

On-demand scan results also don't show up in the Artifact Repository UI.

Is there something else I need to enable?

Answer 1

I believe your containers are being pushed to Google Container Registry (GCR), as evident by "Container Registry host" being eu.gcr.io in your first screenshot. The results should be available in the GCR page and won't show up in the Artifact Registry page.

On-demand scans are not accessible through the UI (Artifact Registry or GCR pages). You can only access the results through the gcloud CLI: https://cloud.google.com/container-analysis/docs/on-demand-scanning-howto#retrieve