HLDModulesSecOps
Container Image Scanning
Docker registry onboarding and automated container image vulnerability scanning.
Container Image Scanning
Container image scanning discovers all Docker images in onboarded container registries and scans them for vulnerabilities using Trivy.
Onboarding & Scanning Flow
Registry Concepts
A container registry has a hierarchy:
Registry (e.g. Docker Hub, ECR, Nexus)
└── Repository (e.g. tensorflow, python)
└── Image (e.g. tensorflow/serving)
└── Tag / Version (e.g. 2.15, latest)API Reference
Onboarding — Container Registries
Repo: mcm-api · Section: /onboarding/container-registries · Table: onboarding_container_registries
| Method | Endpoint | Description |
|---|---|---|
GET | /onboarding/container-registries | List all onboarded registries |
POST | /onboarding/container-registries | Create (onboard) a new registry |
PATCH | /onboarding/container-registries/:id | Update registry credentials or metadata |
DELETE | /onboarding/container-registries/:id | Remove a registry |
Discovery — Container Images
Repo: mcm-module-discovery · Section: /discovery/resources/container-images · Table: discovery_container_images
| Method | Endpoint | Description |
|---|---|---|
POST | /discovery/resources/container-images | Trigger discovery for a registry — fetches all images & tags into DB |
GET | /discovery/resources/container-images?registryId=<id> | List all images for a registry |
GET | /discovery/resources/container-images/:imageId/tags | List all tags for a specific image |
SecOps — Security Findings
Repo: mcm-module-secops · Section: /secops/security-findings/container-images · Table: secops_container_images
| Method | Endpoint | Description |
|---|---|---|
POST | /secops/security-findings/container-images | Trigger a Trivy scan of a specific image tag; store results in DB |
GET | /secops/security-findings/container-images/:imageId | Retrieve scan results for an image |