Skip to content

ScanRuleProps

Properties for defining a ScanRule.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cr-scanrule

Initializer 

import ros_cdk_cr
ros_cdk_cr.ScanRuleProps(
  instance_id: typing.Union[str, IResolvable],
  repo_tag_filter_pattern: typing.Union[str, IResolvable],
  rule_name: typing.Union[str, IResolvable],
  scan_scope: typing.Union[str, IResolvable],
  scan_type: typing.Union[str, IResolvable],
  trigger_type: typing.Union[str, IResolvable],
  namespaces: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]] = None,
  repo_names: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]] = None
)

Properties

Name Type Description
instance_id typing.Union[str, ros_cdk_core.IResolvable] Property instanceId: ACR Instance ID.
repo_tag_filter_pattern typing.Union[str, ros_cdk_core.IResolvable] Property repoTagFilterPattern: The tag that triggers the scan matches the regular expression.
rule_name typing.Union[str, ros_cdk_core.IResolvable] Property ruleName: The scan rule name.
scan_scope typing.Union[str, ros_cdk_core.IResolvable] Property scanScope: The scan scope.
scan_type typing.Union[str, ros_cdk_core.IResolvable] Property scanType: The scan type.
trigger_type typing.Union[str, ros_cdk_core.IResolvable] Property triggerType: Trigger type.
namespaces typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]] Property namespaces: The list of namespaces.
repo_names typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]] Property repoNames: The list of repositories.* When the scan scope is NAMESPACE, this parameter must be empty. * When the scan scope is REPO, this parameter cannot be empty.

instance_idRequired 

instance_id: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property instanceId: ACR Instance ID.

repo_tag_filter_patternRequired 

repo_tag_filter_pattern: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property repoTagFilterPattern: The tag that triggers the scan matches the regular expression.

rule_nameRequired 

rule_name: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property ruleName: The scan rule name.

scan_scopeRequired 

scan_scope: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property scanScope: The scan scope.

Valid values: NAMESPACE: namespace. REPO: repository. INSTANCE: CR instance.

scan_typeRequired 

scan_type: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property scanType: The scan type.

Valid values:

  • VUL: Products Cloud Security Scanner.
  • SBOM: Product Content Analysis.

trigger_typeRequired 

trigger_type: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Property triggerType: Trigger type.

Valid values:

  • AUTO: automatically trigger.
  • MANUAL: manually trigger.

namespacesOptional 

namespaces: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]]
  • Type: typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]]

Property namespaces: The list of namespaces.

  • When the scan scope is NAMESPACE, this parameter cannot be empty.
  • If the scan scope is REPO, you must specify a unique Namespace for this parameter.

repo_namesOptional 

repo_names: typing.Union[IResolvable, typing.List[typing.Union[str, IResolvable]]]
  • Type: typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[str, ros_cdk_core.IResolvable]]]

Property repoNames: The list of repositories.* When the scan scope is NAMESPACE, this parameter must be empty. * When the scan scope is REPO, this parameter cannot be empty.