Control: Ensure container vulnerability scanning is enabled
Description
Container Vulnerability Scanning in Google Cloud Platform (GCP) refers to a security service that automatically performs vulnerability detection on container images stored in Container Registry and Artifact Registry. This service is designed to identify known security vulnerabilities in your container images.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.project_service_container_scanning_api_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.project_service_container_scanning_api_enabled --share
SQL
This control uses a named query:
project_service_container_scanning_api_enabled