STO image scanner support for Google
P
Prepared Lion
Feature request to support using Google scan natively in STO. Currently it seems that scan result ingestion is not supported, even when attempting to use JSON format. Is there any plans to support Google scans in the near future?
Here is what we attempted:
We created a custom step in our template to utilize a service account with the proper permissions to use "gcloud artifacts docker images scan" command output format to JSON. We then got the scan id result to use with the next command "gcloud artifacts docker images list-vulnerabilities" and also convert it to JSON file. However, the next step to use a custom ingestion for the security test does not work and ends up in a "Failed to load raw issues: Expecting value: line 1 column 1 (char 0)" error.
Log In