Benchmark: 7.2 Container Registry

Description

IBM Cloud Container Registry provides a multi-tenant, highly available, scalable, and encrypted private image registry that is hosted and managed by IBM®. You can use IBM Cloud Container Registry by setting up your own image namespace and pushing container images to your namespace.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-ibm-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select 7.2 Container Registry.

Run this benchmark in your terminal:

powerpipe benchmark run ibm_compliance.benchmark.cis_v100_7_2

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run ibm_compliance.benchmark.cis_v100_7_2 --share

Controls

• 7.2.1 Block deployments of vulnerable images to Kubernetes clusters

Tags