Docker
Last updated
Last updated
Docker is a platform designed to automate the deployment, scaling, and management of applications inside lightweight, portable containers. It provides a consistent and reproducible environment, making it easier to develop, test, and deploy applications across different environments.
Delivery Shield gets notified for every build run in a pipeline. To identify the image for every build, it connects to the docker repo and pulls the newly built image.
Once the image is pulled, it runs security scans on it. The scanned results are available in the Vulnerability Management page, and Artifact section of the DBOM page.
Delivery Shield also collects metadata such as Artifact SHA to perform artifact integrity checks and ensure the security in the supply chain. This information gets populated in the DBOM page for audit purposes.
Navigate to Config > Integrations.
In the Artifact panel, click on Docker.
You can use the toggle button provided below the integration tile to enable or disable it as needed.
The Docker integration page is displayed.
Click +New Account.
Enter the Account Name, Approved Artifact Repo name, Host Url, Username and Password as shown below:
Account Name - Enter the name of the user docker account.
Approved Artifact Repo name - Enter the name of the approved artifact repository from which the images are deployed. Security issues are raised by SSD if you try to deploy images from a different repository.
Host Url - Enter the host Url link.
Username - Enter the username to access the docker account.
Password - Enter the password to access the docker account.
Click Save. The docker account gets added.
You can edit the entered values. Click the three dots provided at the end of each added account. Click Edit.
Enter the new values and click Update.
The new values get updated.
