All Collections
Setting up Docker container scanning
Container scanning for Gitlab Self Managed Container Registry
Container scanning for Gitlab Self Managed Container Registry
Bart Jonckheere avatar
Written by Bart Jonckheere
Updated over a week ago

You can now integrate your Gitlab Self Managed Container Registry with Aikido to scan your containers for known vulnerabilities.

Follow the simple steps below to activate this feature:

Step 1: Log into your Gitlab account to gather some data.

We'll have to gather your username (see screenshot)

Step 2: Copy the group ID where the container registry resides (see screenshot)

Step 3: Under personal preferences, Access tokens, create a new token for Aikido (direct link: ). https://gitlab.com/-/profile/personal_access_tokens

The scopes included must be: read_api, read_registry

See screenshot:

Step 4: Enter the collected data in Aikido (direct link: https://app.aikido.dev/settings/container-image-registry/add/gitlab-self)

Step 5: Aikido will now find all container repositories you can access and list them.

Step 6: Repositories can be linked to a code repository in order to perform better deduplication of findings. This step is optional!

Step 7: In the action menu next to the registry, click 'scan repos in registry' to get started. Results will appear in the Feed!


Did this answer your question?