Scan CI/CD Images

Configure the Bamboo plugin to automatically tag CI/CD images with 'qualys_scan_target:<image-sha>'.

  • Docker URL: Docker REST API URL / Docker socket path. Only unix:/// and tcp:// protocols are allowed.

  • Cert File Path: If you are using a remote server that communicates over HTTPS, you can provide a specific folder location that contains the files ca.pem, cert.pem, and key.pem. For example, /var/bamboo_home/certs.

bamboo_cicd

Docker URLs (unix Socket or TCP) Used in Various Docker Deployment Scenarios

The following table includes details of Docker URLs used in Docker Deployment Scenarios:

Deployment Scenario

Sensor Location

Docker URLs

Job executed by Bamboo server

AND

Docker host == Bamboo server

Bamboo server host

UNIX

unix:///var/run/docker.sock

Job executed by Bamboo server

AND

Docker Host == Remote docker host (any machine other than Bamboo server or agent)

Remote docker host

TCP path of the Remote Docker host:

tcp://<ip_of_RDH>:<port>

For example,

tcp://10.115.67.61:2375

Job executed by Bamboo agent

AND

Docker host == Bamboo agent

Bamboo agent

UNIX

unix:///var/run/docker.sock

Job executed by Bamboo agent

AND

Docker Host == Remote docker host (any machine other than Bamboo server or agent)

Remote docker host

TCP path of the Remote Docker host:

tcp://<ip_of_RDH>:<port>

For example,

tcp://10.115.67.61:2375

Next Step

Use the Plugin