docker scout policy

内容説明	Evaluate local Rego policies against an image and display the results (experimental)
利用方法	`docker scout policy [IMAGE \| REPO]`

試験的

このコマンドは試験的なものです。

試験的機能はテスト向けに意図されたものであり、その機能に関してのフィードバックを得る目的があります。この機能はリリース時に予告なく変更される場合があり、また今後のリリースに向けて削除されることがあります。

内容説明

The docker scout policy command evaluates policies against an image. The image analysis is uploaded to Docker Scout where policies get evaluated.

The policy evaluation results may take a few minutes to become available.

オプション	デフォルト	内容説明
`-e, --exit-code`		Return exit code '2' if policies are not met, '0' otherwise
`--only-policy`		Comma separated list of policies to evaluate
`--org`		Namespace of the Docker organization
`-o, --output`		Write the report to a file
`--platform`		Platform of image to evaluate policies against
`--policy-bundle`		OCI reference of a policy bundle to evaluate (repeatable)
`--policy-config`		Path or http(s) URL to a JSON file configuring policy enablement and inputs
`--policy-dir`		Path to a directory of local .rego policy files (repeatable)
`--policy-file`		Path or http(s) URL to a .rego policy file (repeatable)
`--result-file`		Write the full Rego evaluation result (pass, violations, query bindings and OPA metrics) of each evaluated policy to a JSON file (useful when iterating on local --policy-file policies)

$ docker scout policy dockerscoutpolicy/customers-api-service:0.0.1

$ docker scout policy dockerscoutpolicy/customers-api-service:0.0.1 --org dockerscoutpolicy

$ docker scout policy dockerscoutpolicy/customers-api-service:0.0.1 --platform linux/amd64

$ docker scout policy dockerscoutpolicy/customers-api-service --to-env production

コマンド	内容説明
`docker scout policy publish`	Package local Rego policies into an OCI bundle and push it to a registry (experimental)