look at checking if there is a way to get workload Artifact Registry vulnerability checks alongside the infrastructure vulnerability tab results already in SCC-P

[fmichaelobrien]

Michael will look at checking if there is a way to get workload AR vulnerability checks alongside the infrastructure vulnerability tab results already in SCC-P

Add (for example Traffic Generation - canary container - https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/blob/main/docs/google-cloud-landingzone-traffic-generation.md) https://console.cloud.google.com/artifacts/docker/magellan-01/northamerica-northeast1/traffic-generation/traffic-generation/

to

https://console.cloud.google.com/security/command-center/vulnerabilities

Artifact Registry scanning of cloud build targeted container

SCC (non-premium has the vulnerabilities tab - but not compliance or threats

Enumerate rest and gcloud apis https://cloud.google.com/artifact-registry/docs/reference/rest https://cloud.google.com/security-command-center/docs/reference/rest

[fmichaelobrien]

single pane of glass look at IDS