mirror of https://github.com/docker/docs.git
Reorganise content around new local scanning features
This commit is contained in:
parent
deedbe185c
commit
3a9ab7dbe4
|
@ -20,13 +20,25 @@ title: Artifactory integration
|
|||
Integrating Docker Scout with JFrog Artifactory lets you run image analysis
|
||||
automatically on images in your Artifactory registries.
|
||||
|
||||
This integration is made possible by a monitoring agent. The agent is a
|
||||
## Local scanning
|
||||
|
||||
You can Artifactory images for vulnerabilities locally with Docker Desktop or the Docker CLI. You first need to authenticate with JFrog Artifactory using the `[Docker login](/engine/reference/commandline/login/)` command. For example:
|
||||
|
||||
```bash
|
||||
docker login {REPOSITORY_URL}.jfrog.io
|
||||
```
|
||||
|
||||
You can find the credentials for your Artifactory repository by selecting it in the Artifactory UI and selecting the **Set Me Up** button.
|
||||
|
||||
## Production scanning
|
||||
|
||||
To automatically scan images and containers running in production environments you need to deploy the Docker Scout Artifactory agent. The agent is a
|
||||
standalone service that analyzes images and uploads the result to Docker Scout.
|
||||
You can view the results using the
|
||||
[Docker Scout web UI](https://dso.docker.com/){: target="\_blank" rel="noopener"
|
||||
}.
|
||||
|
||||
## How it works
|
||||
### How the agent works
|
||||
|
||||
The Docker Scout Artifactory agent is available as an
|
||||
[image on Docker Hub](https://hub.docker.com/r/docker/artifactory-agent){:
|
||||
|
@ -43,10 +55,9 @@ SBOMs for all of its base images. The recorded SBOMs include both Operating
|
|||
System (OS)-level and application-level programs or dependencies that the image
|
||||
contains.
|
||||
|
||||
Additionally, the agent sends the following metadata about the image to Docker Scout to
|
||||
record:
|
||||
Additionally, the agent sends the following metadata about the image to Docker Scout:
|
||||
|
||||
- The source repository for the image
|
||||
- The source repository URL and commit SHA for the image
|
||||
- Build instructions
|
||||
- Build date
|
||||
- Tags and digest
|
||||
|
@ -59,11 +70,11 @@ itself, nor any data inside the image, such as code, binaries, and layer blobs.
|
|||
The agent doesn't detect and analyze pre-existing images. It only analyzes
|
||||
images that appear in the registry while the agent is running.
|
||||
|
||||
## Deploy the agent
|
||||
### Deploy the agent
|
||||
|
||||
This section describes the steps for deploying the Artifactory agent.
|
||||
|
||||
### Prerequisites
|
||||
#### Prerequisites
|
||||
|
||||
Before you deploy the agent, ensure that you meet the prerequisites:
|
||||
|
||||
|
@ -78,7 +89,7 @@ Before you deploy the agent, ensure that you meet the prerequisites:
|
|||
The agent supports all versions of JFrog Artifactory and JFrog Container
|
||||
Registry.
|
||||
|
||||
### Create the configuration file
|
||||
#### Create the configuration file
|
||||
|
||||
You configure the agent using a JSON file. The agent expects the configuration
|
||||
file to be in `/opt/artifactory-agent/data/config.json` on startup.
|
||||
|
@ -132,7 +143,7 @@ The following snippet shows a sample configuration:
|
|||
Create a configuration file and save it somewhere on the server where you plan
|
||||
to run the agent. For example, `/var/opt/artifactory-agent/config.json`.
|
||||
|
||||
### Run the agent
|
||||
#### Run the agent
|
||||
|
||||
The following example shows how to run the Docker Scout Artifactory agent using
|
||||
`docker run`. This command creates a bind mount for the directory containing the
|
||||
|
@ -153,7 +164,7 @@ $ docker run \
|
|||
docker/artifactory-agent:v1
|
||||
```
|
||||
|
||||
## View analysis results
|
||||
### View analysis results
|
||||
|
||||
You can view the image analysis results in the Docker Scout web UI.
|
||||
|
||||
|
|
|
@ -66,7 +66,7 @@ For more information, see
|
|||
### Artifactory integration
|
||||
|
||||
Users of JFrog Artifactory, or JFrog Container Registry, can integrate Docker
|
||||
Scout to enable automatic analysis of images. For more information, see
|
||||
Scout to enable automatic analysis of images locally and in production. For more information, see
|
||||
[Artifactory integration](./artifactory.md).
|
||||
|
||||
## Docker Scout CLI
|
||||
|
|
Loading…
Reference in New Issue