Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Problem with Vulnerabilities Scan in GCP Artifact Registry

I have enabled the "Container Analysis API" and "Artifact Registry" for the project. When I go to my GCP console --> API --> Enabled APIs & Services, then I can also see that API is enabled:

 

When I go to Artifact Registry in GCP console, it is still showing API disabled (see the pic below):

pic2.png

Although I have enabled the Container Analysis API through IaaC (Pulumi with TypeScript), but still I have to go to GCP Console --> Artifact Registry --> Settings and manually click on "Vulnerability scanning" Enable. After that the new images are being scanned. Is there anyway to do all these steps using IaaC ? I want to avoid manual clicks.

6 1 940
1 REPLY 1

Hi @Zeeshan1986,

Welcome to Google Cloud Community!

You can setup automatic scanning depending on your registry type. You can check this documentation on container scanning feature support which listed the packages available for scanning.

You can also check out the following documentation for more information:

Hope this helps.