Automatic Docker image scan on push
Warning
Starting October 13, 2026, Yandex Container Registry will be unavailable to new users.
The existing users can create resources until November 10, 2026. Afterwards, Yandex Container Registry will go read-only and cease to operate on December 14, 2026. For more information on how it will be handled, see this article on Yandex Container Registry sunset.
Note
You can enable automatic vulnerability scans of Docker images on push to Yandex Container Registry in the vulnerability scanner settings without creating any Yandex Cloud Functions functions and triggers.
In this tutorial, you will create a registry in Container Registry to store a Docker image. You will also set up automatic vulnerability scans on push to the registry. A Cloud Functions trigger will track changes to the registry and invoke a function to start scanning when you push a Docker image to the registry.
To set up and run Docker image vulnerability scans on push to Container Registry, use the following tools:
- Yandex Cloud management console, CLI, and API: Use one of these methods to create your infrastructure step by step.
- Terraform: Streamline creating and managing your resources with the infrastructure as code (IaC) approach. Download a Terraform configuration example from the GitHub repository and deploy your infrastructure using the Yandex Cloud Terraform provider.