Scan CoreOS Quay Registry

To scan a repository in CoreOS Quay, configure the registry.

Prerequisites

• You have installed a Defender somewhere in your environment.

Configure a CoreOS Quay Registry Scan

1. Log in to Console, and select Defend > Vulnerabilities > Images > Registry settings.
2. Select Add registry and enter the details:

   1. In Version, select CoreOS Quay.
   2. In Registry (Optional) enter the Fully Qualified Domain Name (FQDN) for the CoreOS Quay registry server.

      To configure a self-hosted registry, enter an IP address, while for the SaaS version, provide the registry URL.
   3. In Repository, enter the name of the repository to scan.
   4. Optionally enter the Repositories to exclude them from being scanned.
   5. Enter Tag numbers to scan, leave blank, or enter a wildcard (*) to scan all the tags.
   6. Optionally, enter Tags to exclude, to avoid scanning images with specified tags.
   7. In Credential, configure how Prisma Cloud authenticates with CoreOS Quay.

      Select the credential for CoreOS Quay from the drop-down list.

      If there are no credentials in the list, click Add new to create new credentials under Manage > Authentication > Credentials Store.
   8. In OS type, specify whether the repo holds Linux or Windows images.
   9. In Scanners scope, specify the collections of defenders to use for the scan.
   10. In Number of scanners, enter the number of Defenders across which scan jobs can be distributed.
   11. In Cap, limit the number of images to scan.

       Set Cap to 5 to scan the five most recent images, or enter a different value to increase or decrease the limit. Set Cap to 0 to scan all images.
3. Select Add and scan.

   Verify that the images in the repository are being scanned under Monitor > Vulnerabilities > Images > Registries.