turbot/gcp_compliance

Control: Ensure container vulnerability scanning is enabled

Description

Container Vulnerability Scanning in Google Cloud Platform (GCP) refers to a security service that automatically performs vulnerability detection on container images stored in Container Registry and Artifact Registry. This service is designed to identify known security vulnerabilities in your container images.

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.project_service_container_scanning_api_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.project_service_container_scanning_api_enabled --share

SQL

This control uses a named query:

project_service_container_scanning_api_enabled

Tags