scout(policy): unsupported distro versions option

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
This commit is contained in:
David Karlsson 2024-02-13 11:33:43 +01:00
parent 7159870c4c
commit f6fe7c9b74
1 changed files with 17 additions and 6 deletions

View File

@ -293,11 +293,21 @@ An asterisk (`*`) matches up until the character that follows, or until the end
of the image reference. Note that the `docker.io` prefix is required in order
to match Docker Hub images. This is the registry hostname of Docker Hub.
You can also configure the policy to allow only supported tags of Docker
Official Images. When this option is enabled, images using unsupported tags of
official images trigger a policy violation. Supported tags for official images
are listed in the **Supported tags** section of the repository overview on
Docker Hub.
You can also configure the policy to:
- Allow only supported tags of Docker Official Images.
When this option is enabled, images using unsupported tags of official images
trigger a policy violation. Supported tags for official images are listed in
the **Supported tags** section of the repository overview on Docker Hub.
- Allow only Docker Official Images of supported distro versions
When this option is enabled, images using unsupported Linux distributions
that have reached end of life (such as `ubuntu:18.04`) trigger a policy violation.
Enabling this option may cause the policy to report no data
if the operating system version cannot be determined.
This policy isn't enabled by default. To enable the policy:
@ -305,7 +315,8 @@ This policy isn't enabled by default. To enable the policy:
2. Go to the **Policies** section.
3. Select the **Unapproved base images** policy in the list.
4. Enter the patterns that you want to allow.
5. Select whether you want to allow only supported tags of official images.
5. Select whether you want to allow only supported tags or supported distro
versions of official images.
6. Select **Save and enable**.
The policy is now enabled for your current organization.