4.4. Checking images

Procedure

• Run the following command to check the build-time violations of your security policies in images:

  $ roxctl image check --image=<image_name>

  The format is defined in the API reference. To cause Red Hat Advanced Cluster Security for Kubernetes (RHACS) to re-pull image metadata and image scan results from the associated registry and scanner, add the --force option.

  注意

  To check specific image scan results, you must have a token with both read and write permissions for the Image resource. The default Continuous Integration system role already has the required permissions.