GCP Scanner for GCP Artifact Registry

Google Cloud Platform (GCP) provides an efficient way to store container images through the Artifact Registry. Leveraging the power of Aikido in conjunction with GCP's Artifact Registry ensures a robust security framework. Let's walk through the process of enabling container analysis for images stored in Artifact Registry.

Setup

Aikido will use the findings reported by GCP Container Analysis and run them through the same deduplication and de-noising engine you are familiar with. Let's dive into the details of this new functionality and how to enable it.

Step 1: Set Up Aikido Integration with GCP

Before you begin, make sure your GCP cloud environment has been linked with Aikido. If you have not done this already, navigate to the cloud overview in Aikido. Click on "Connect cloud" and follow the steps to get set up. More information can be found in this article.

Step 2: Enable Artifact Registry Scanning in GCP

After connecting your GCP environment, navigate to the Artifact Registry service. Click on "Settings" on the left-hand side, where you can turn on vulnerability scanning for your container images.

Step 3: Push the latest version of your images to artifact registry

GCP will only scan newly pushed images for vulnerabilities. So for the analysis to start on your images, you should push the latest version of your images again to the artifact registry.

Step 4: Start a scan in Aikido to process the results

After enabling the scanner in GCP, you can go back to Aikido and start a scan for your GCP cloud environment.

Step 5. Link Images

The last step is to link a cloud image to a code repository. During the scan in the previous step, Aikido will look for any repositories you host on the Artifact Registry in GCP. Go to the 'Images' tab on the cloud detail page and link the images to the code repository where the source code is hosted.

Once the cloud images are linked to the code repositories, Aikido will assess and score the findings from Container Analysis and link them to the related cloud environment and code repository.

Aikido also supports the scanning of your containers hosted in GCP's Container Registry. You can find those instructions here.