Skip to navigation
API ReferenceContainer Registry

Update registry security settings

Sets the vulnerability pull policy: ALLOW, or block pulls of images with findings at or above CRITICAL, HIGH, MEDIUM or LOW. Returns 202 while the change is applied. Requires scope: container-registry.write.

# Example request with curl (set IBEE_API_TOKEN to a platform API token and WORKSPACE_ID to the workspace first).
# REGISTRY_ID: Registry ID
curl -X PATCH "https://api.ibee.ai/v1/container-registry/registries/$REGISTRY_ID/security/settings?workspace_id=$WORKSPACE_ID" \
  -H "Authorization: Bearer $IBEE_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"vulnerability_pull_policy": "ALLOW"}'

Authentication

AuthorizationBearer

IBEE platform API token. Production tokens start with ibee_prod_key_; development tokens start with ibee_dev_key_. Use a token only with its matching gateway environment.

Path parameters

registry_idstringRequiredformat: "uuid"
Registry ID.

Query parameters

workspace_idstringRequiredformat: "^[1-9][0-9]*$">=1 character

The positive numeric workspace ID to scope this request to. Zero, negative, and non-numeric values are rejected.

Request

This endpoint expects an object.
vulnerability_pull_policyenumRequired

ALLOW pulls every image. BLOCK_<SEVERITY> refuses pulls of images with a finding at or above that severity.

Allowed values:

Response

Settings change accepted.
vulnerability_pull_policyenum

ALLOW pulls every image. BLOCK_<SEVERITY> refuses pulls of images with a finding at or above that severity.

Allowed values:
scan_on_pushboolean
Whether pushed images are scanned for vulnerabilities automatically.
sbom_generation_on_pushboolean
Whether an SBOM is generated for pushed images automatically.
observed_stateenum

State the registry service has actually reached.

  • PROVISIONING: being created.
  • UPDATING: a change is being applied.
  • DELETING: being removed.
  • ACTIVE: ready.
  • ERROR: the last change failed.
  • DELETED: removed.
generationinteger
Incremented by every accepted settings change.
observed_generationinteger

The last generation applied; equal to generation when settled.

Errors

401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
409
Conflict Error
422
Unprocessable Entity Error
503
Service Unavailable Error