Control: Container registries image scan should be enabled
Description
This control checks whether image scan is enabled. This control is non-compliant if image scan is disabled.
Usage
Run the control in your terminal:
powerpipe control run terraform_azure_compliance.control.container_registry_image_scan_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_azure_compliance.control.container_registry_image_scan_enabled --share
SQL
This control uses a named query:
select address as resource, case when (attributes_std ->> 'sku') in ('Standard', 'Premium') then 'ok' else 'alarm' end status, split_part(address, '.', 2) || case when (attributes_std ->> 'sku') in ('Standard', 'Premium') then ' image scan enabled' else ' image scan disabled' end || '.' reason, path || ':' || start_linefrom terraform_resourcewhere type = 'azurerm_container_registry';