Container security with Quay Container Registry integration
Snyk integrates with Quay Container Registry to enable you to import your container images and monitor them for vulnerabilities.
Snyk tests the images you have imported (Projects) for any known security vulnerabilities, testing them at a frequency you control, and alerts you when new issues are detected.
Integration with Quay is available for all Snyk users.
Integrate with Quay Container Registry
Prerequisites for Quay integration
You must be an administrator for the Organization you are configuring in Snyk.
Snyk needs user credentials to integrate with Quay and does not support Quay when it is configured for single sign-on (SSO).
Configure Quay integration
In your Snyk account, navigate to Integrations. Under the Container Registries section, find the Quay option and click it.
In the Account credentials section, enter your Quay username and password login credentials. In the container registry name, enter the full URL to the registry you want to integrate with. This can be a cloud-based Quay or a private host. To finish, click Save.
If you are using a self-hosted Quay registry, contact Snyk Support to provide you with a token. For more information, see Snyk Container for self-hosted container registries (with Broker).
Quay.io deprecated use of Quay login in June 2021. The credentials can no longer be Quay username and password, but must be Quay robot account credentials (username and token) that have at least 'read' permissions to the desired repository.
Snyk tests the connection values, and the page reloads, displaying Quay integration information, and the Add your Quay images to Snyk button becomes available. If the connection to Quay fails, a notification appears under the Connected to Quay section.
When the connection succeeds, you can use Snyk to scan your images from Quay.
Snyk tests and monitors your Quay container images by evaluating the tags in your repositories. After import to Snyk, your image vulnerabilities are identified and can be triaged easily.
To add images from Quay to Snyk:
Scan container images from Quay in Snyk
Prerequisites for Quay image scanning
You must have a Snyk account with access to the relevant Organization given by an administrator.
Quay integration must be configured. For details, see Integrate with Quay Container Registry.
Steps in scanning Quay images
Log in to your account and navigate to the relevant group and Organization that you want to manage.
Under the Projects tab, click Add project. The list of integrations already configured on your account opens.
Select the Quay option or Other if Quay does not appear.
The view titled Which images do you want to test? opens, displaying all available images for your connected registry grouped by each of your repositories.
Select single or multiple images to be imported to Snyk. You can select by choosing a specific image or by selecting an entire repository. You can also search by image name to find specific images to import.
To finish, click Add selected repositories at the top right. A status bar appears at the top of the page as the images are imported; you can continue working in the meantime.
When the import ends:
You can view the newly imported image, marked with a NEW tag, on the Projects page; Images are grouped by repository and linked individually to a detailed Project page. An import log becomes available; you can reach it at the top of the Projects list.
To enrich the data and get recommendations regarding your base image, from the Settings you can connect your Dockerfile to the image Project. For more information, see Adding your Dockerfile and testing your base image.
Quay imports are designated with a unique icon, and you can filter the integration in the Projects view to see Quay Projects only as shown:
For application vulnerabilities within container images, any changes to the application will not be reflected with a manual or recurring retest. A re-import of the image is required. For more information, see Detecting application vulnerabilities in container images.
Last updated
