From 8ef231faaea9a3e723d39b4889e4fd3e1c8f0610 Mon Sep 17 00:00:00 2001 From: "Andoni A." <14891798+andoniaf@users.noreply.github.com> Date: Tue, 17 Feb 2026 09:06:38 +0100 Subject: [PATCH] docs(image): update docs and changelog for public Docker Hub support - Add note about public namespace scanning without credentials to docs - Update changelog entry to mention public Docker Hub support --- docs/user-guide/providers/image/getting-started-image.mdx | 2 +- prowler/CHANGELOG.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/user-guide/providers/image/getting-started-image.mdx b/docs/user-guide/providers/image/getting-started-image.mdx index 85670c7e2a..928b18dbe3 100644 --- a/docs/user-guide/providers/image/getting-started-image.mdx +++ b/docs/user-guide/providers/image/getting-started-image.mdx @@ -267,7 +267,7 @@ Skipping TLS verification disables certificate validation for registry connectio Registry Scan Mode supports the following registry types: * **OCI-compatible registries:** Any registry implementing the OCI Distribution Specification (e.g., Harbor, GitLab Container Registry, GitHub Container Registry). -* **Docker Hub:** Specify a namespace with `--registry docker.io/{org_or_user}`. +* **Docker Hub:** Specify a namespace with `--registry docker.io/{org_or_user}`. Public namespaces can be scanned without credentials; authenticated access is used automatically when `REGISTRY_USERNAME` and `REGISTRY_PASSWORD` are set. * **Amazon ECR:** Use the full ECR endpoint URL (e.g., `123456789.dkr.ecr.us-east-1.amazonaws.com`). Authentication is handled via AWS credentials. ### Authentication for Private Registries diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md index 2bc26fbd02..4ff3729962 100644 --- a/prowler/CHANGELOG.md +++ b/prowler/CHANGELOG.md @@ -17,7 +17,7 @@ All notable changes to the **Prowler SDK** are documented in this file. - OCI regions updater script and CI workflow [(#10020)](https://github.com/prowler-cloud/prowler/pull/10020) - `image` provider for container image scanning with Trivy integration [(#9984)](https://github.com/prowler-cloud/prowler/pull/9984) - Private registry authentication for the Image provider via environment variables (`REGISTRY_USERNAME`/`REGISTRY_PASSWORD`, `REGISTRY_TOKEN`) [(#9985)](https://github.com/prowler-cloud/prowler/pull/9985) -- Registry scan mode for Image provider: enumerate and scan all images from OCI, Docker Hub, and ECR registries with `--registry`, `--image-filter`, `--tag-filter`, `--max-images`, `--registry-insecure`, and `--registry-list` flags +- Registry scan mode for Image provider: enumerate and scan all images from OCI, Docker Hub, and ECR registries with `--registry`, `--image-filter`, `--tag-filter`, `--max-images`, `--registry-insecure`, and `--registry-list` flags, including public Docker Hub namespace scanning without credentials - CSA CCM 4.0 for the Alibaba Cloud provider [(#10061)](https://github.com/prowler-cloud/prowler/pull/10061) ### 🔄 Changed