Scanning Images from Container Registries

Scanning Images from Container Registries

Scan images directly from registries without pulling them locally:

# Docker Hub public images
trivy image docker.io/library/nginx:latest
snyk container test nginx:latest

# Private registry with authentication
export TRIVY_USERNAME='myuser'
export TRIVY_PASSWORD='mypass'
trivy image private.registry.com/myapp:latest

# Amazon ECR
aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 123456789.dkr.ecr.us-east-1.amazonaws.com
trivy image 123456789.dkr.ecr.us-east-1.amazonaws.com/myapp:latest

# Google Container Registry
gcloud auth configure-docker
snyk container test gcr.io/project-id/myapp:latest

# Azure Container Registry
az acr login --name myregistry
trivy image myregistry.azurecr.io/myapp:latest