search

goharbor / harbor

An open source trusted cloud native registry project that stores, signs, and scans content.
https://goharbor.io
Apache License 2.0
23.74k stars 4.73k forks source link

Feature - Allow scheduling of scans at project level #15164

Open akshaya835 opened 3 years ago

akshaya835 commented 3 years ago

Is your feature request related to a problem? Please describe. Not able to schedule scan on project level. Currently scheduled scans run for entire registry/across all projects which is inefficient

Describe the solution you'd like Allow for scheduling of scans at "project level"

Describe the main design/architecture of your solution A setting can be exposed to project admins which will allow them to schedule scans for images related to their project.

Describe the development plan you've considered Once the feature is available we can start to test it out and implement in our environment as soon as possible.

Additional context None.

bitsf commented 3 years ago

you can setup event based scan at project level. current we don't support schedule on project level

dkulchinsky commented 3 years ago

Just wanted to add our use case here as well for consideration, we're using Kaniko (https://github.com/GoogleContainerTools/kaniko) as our image build tool, it supports layer caching which we store in a dedicated project in Harbor, these layers don't need to be scanned and there are many of them and making our weekly scans take a long time to run, it would be amazing if we could configure the scan-all job to scan only specific projects (or exclude projects).

Thanks!

github-actions[bot] commented 2 years ago

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.