Anchore CloudQuery Plugin Overview

Authentication #

1. API Key Authentication: Using an API key generated from Anchore Enterprise, You can generate an API key by following the Anchore Enterprise documentation.
2. Basic Authentication: Using username and password credentials

# MacOS / Linux
export ANCHORE_API_KEY="your_api_key"
# or
export ANCHORE_USERNAME="your_username"
export ANCHORE_PASSWORD="your_password"

# Windows
$env:ANCHORE_API_KEY="your_api_key"
# or
$env:ANCHORE_USERNAME="your_username"
$env:ANCHORE_PASSWORD="your_password"

Example Config #

kind: source
spec:
  name: anchore
  path: cloudquery/anchore
  version: "v1.0.0"  # Replace with the latest version
  tables: ["*"]
  destinations: ["postgresql"]
  spec:
    base_url: "http://anchore.example.com:2882"
    api_key: "${ANCHORE_API_KEY}"
    # Or use username/password
    # username: "${ANCHORE_USERNAME}"
    # password: "${ANCHORE_PASSWORD}"
    
    # optional parameters
    # concurrency: 100
    # scheduler: "dfs"
    # table_options:
    #   anchore_images:
    #     - analyzedsince: "5 hours ago"

Configuration #

• base_url (string) (required)
  The address of the Anchore Enterprise API instance (e.g., http://anchore.example.com:2882). The default port for the API instance is 2882. The plugin will automatically append "/v2" to the URL if not present.
• api_key (string) (required if username/password not provided)
  Anchore API key for authentication.
• username (string) (required if api_key not provided)
  Username for basic authentication.
• password (string) (required if username is provided)
  Password for basic authentication.
• concurrency (integer) (optional) (default: 1500)
  A best effort maximum number of Go routines to use. Lower this number to reduce memory usage.
• scheduler (string, optional, default: dfs)
  The scheduler to use when determining the priority of resources to sync.
  Supported values are:

  • dfs (depth-first search)
  • round-robin
  • shuffle
  • shuffle-queue

  For more information about this, see performance tuning.
• table_options (map) (default: null)
  A set of options to override the defaults for certain tables.
  The full list of supported options is documented under the Table Options section of each table. The format of the table_options object is as follows:

  table_options:
    <table_name>:
      -<input_object>
  

  table_options:
    anchore_images:
      - analyzed_since: "5 hours ago"
        history: true
      - analyzed_since: "10 days ago"
        image_id: "sha256:1234567890"
            
  

Time in table options

• now
• x seconds [ago|from now]
• x minutes [ago|from now]
• x hours [ago|from now]
• x days [ago|from now]

• until: now
• until: 2 days ago
• until: 10 months 3 days 4h20m from now
• until: 2024-01-01T12:00:00+00:00