You use Artifact Registry to store container images built with Cloud Build. You need to ensure that all existing and new images are continuously scanned for vulnerabilities. You also want to track…

Question

Options

• AConfigure Artifact Registry to automatically scan new images and periodically re-scan all images.
• BConfigure Artifact Registry to send vulnerability scan results to a Cloud Storage bucket. Use a
• CConfigure Artifact Registry to automatically re-scan images daily. Enable Cloud Audit Logs to track
• DConfigure Artifact Registry to automatically trigger vulnerability scans for new image tags, and view

• A
  78% (18)
• B
  4% (1)
• C
  4% (1)
• D
  13% (3)

Explanation

This approach ensures continuous vulnerability scanning for both new and existing images, helping to maintain security compliance. Cloud Audit Logs allow tracking of who pushed each image, providing accountability and visibility into registry activity. This aligns with best practices for securing container artifacts and monitoring potential vulnerabilities effectively.

No community discussion yet for this question.