Pipeline with scan an image and then push docker image to ACR

[Jamal Ashraf]

I would like to add scanner to scan an images during my pipeline and then push that image to Azure Container Registry. Would anyone please help me in this regard or someone has some solution for this problem? So for reference i have shared two solutions. If anyone has some sort of solution recommendation, it is welcome. Please share that. Otherwise anyone can transform the below solutions for BitBucket Pipeline PLEASE..

Solution for GitHub:

https://www.letsdevops.net/post/letsdevops-build-docker-image-scan-and-push-to-acr-ci-cd-using-github

Solution for GitHub (from MICROSOFT) but expensive

https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-cicd

[Bo Christensen]

H Jamal Ashrafi, I read that you seems to have the same problem as me, thus I hope you found a solution and you are able to help me?

I have tried to solve this problem but have failed.

I need to build a docker image using bitbucket-pipelines and ACR.

I need examples of how to write the bitbucket-pipelines.yml

using 'az acr build' and how to push the image into ACR.

Regards

Bo Christensen

Email: huskatskrivetilmig@hotmail.com

[Mark C]

Hi @Jamal Ashraf,

Welcome to the community.

For scanning Docker image vulnerabilities, we partnered with Snyk that can achieve that.
Having said that, you can check the following links below that may help and get you started with Bitbucket Cloud Pipelines + Snyk integration.

• Bitbucket Pipelines integration
• Application Scanning in your pipeline

Hope it helps and do let me know if you have further questions.

Regards,
Mark C