docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

scout: fix build-push command for image analysis 

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
This commit is contained in:
David Karlsson 2023-08-31 21:01:55 +02:00
parent 431d2bddfe
commit c10eb0307d
1 changed files with 11 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
content/scout/image-analysis.md
View File

@ -62,28 +62,23 @@ Prerequisites:
1. Sign in with your Docker ID, either using the `docker login` command or the 1. Sign in with your Docker ID, either using the `docker login` command or the
**Sign in** button in Docker Desktop. **Sign in** button in Docker Desktop.
2. Build and tag the image that you want to analyze. 2. Build and push the image that you want to analyze.
```console ```console
$ docker build --tag <org>/<image>:latest --provenance=true --sbom=true . $ docker build --push --tag <org>/<image:tag> --provenance=true --sbom=true .
``` ```
> **Note** Building with the `--provenance=true` and `--sbom=true` flags attaches
> [build attestations](../build/attestations/_index.md) to the image. Docker
> Building with the `--provenance=true` and `--sbom=true` flags attach Scout uses attestations to provide more fine-grained analysis results.
> [build attestations](../build/attestations/_index.md) to the image, which
> yields more precise analysis results.
3. Push the image to Docker Hub to trigger analysis of the image: The default `docker` driver only supports build attestations if you use the
[containerd image store](../desktop/containerd/_index.md).
```console 3. Go to the [Docker Scout Dashboard](https://scout.docker.com/)
$ docker push <org>/<imagename>:latest 4. Sign in with your Docker ID.
``` 5. Select the Docker organization that contains the image you just pushed.
6. Go to the **Images** tab. The image appears in the list shortly after you
4. Go to the [Docker Scout Dashboard](https://scout.docker.com/)
5. Sign in with your Docker ID.
6. Select the Docker organization that contains the image you just pushed.
7. Go to the **Images** tab. The image appears in the list shortly after you
push it to the registry. push it to the registry.
It may take a few minutes for the analysis report to appear. If the analysis It may take a few minutes for the analysis report to appear. If the analysis