Scanning Container Images

Syntax for scanning a public container image

java -jar threat-agent-latest.jar useAgentV2=false --oid={ORG_ID} --eid={ENTITY_ID} --apikey={API_KEY} image:docker.io/nginx:latest

Syntax for scanning a private container image

It is recommended to setup a service account in your container registry and create a service token for your service account to be used in the Threat Agent.

java -jar agent.jar useAgentV2=false --oid={ORG_ID} --eid={ENTITY_ID} --apikey={API_KEY} --registry-login={LOGIN} --registry-password={ACCESS_TOKEN} image:docker.io/threatrix/threat-agent:latest