Skip to content

Latest commit

 

History

History

old-scan-engine

README.md

Google Cloud Build

cloudbuild.yaml contains an example for a workflow for Google Cloud Build with these steps:

  • Build the docker image for the current repo
  • Get the secret value for Sysdig Secure API Token
  • Execute Sysdig inline image scanner, stop the workflow if it fails
  • Push the image to a registry

Cloud Build workflow with Sysdig inline image scanning

In this example, the Sysdig API Token is stored as a secret in Secrets Manager, so the Google Cloud Build account will need secret accessor permissions.

References

More details on Sysdig blog article: https://sysdig.com/blog/securing-google-cloud-run/