Tokens, scanning and cleanup · Container registry
Access tokens, vulnerability scans, cleanup rules and deleting images.
Access tokens, vulnerability scans, cleanup rules and deleting images.
Access tokens
Create a token for each person or CI pipeline, and use it as the docker login password. Each secret is shown once. Revoking a token stops anything logged in with it straight away.
Vulnerability scanning
With Scan on push, every new image is checked for known CVEs. The repository list shows the worst finding, and each image lists its vulnerabilities and whether a fix exists.
Cleanup
Cleanup rules run daily and remove old or untagged images while keeping the ones you choose. Space is freed at the weekly garbage collection on Sunday at 03:00 UTC. An image that an App Platform app runs is kept until the app deploys another one.
Delete
Delete a tag, an image, a whole repository or the registry from the registry page. Anything that pulls a deleted image fails. Deleting the registry revokes all tokens and stops billing.