Default Policy
The image has a default policy, which defaults to be enabled. The default policy applies to all repositories and all images. Only an alarm is reported and no blocking is performed.
Adding a Policy
1. Log in to the CSG Console.
2. On the left navigation bar, select Image security > Policy Management to go to the policy management page.
3. Click"New policy" to go to the new policy page.
4. Enter basic information for the policy.
5. Select a policy object, that is, specify the image to which the policy applies.
6. Add rules to images in the specified repository and check the vulnerabilities in the image and repository by adding these rules.
7. After the configuration is complete, click"save" to save the policy configuration.
Configuring Policies by Batch
You can process policies by batch, including enabling, disabling, and deleting.
1. Log in to the CSG Console.
2. Select Image security > Policy Management on the left navigation bar to go to the Policy Management page.
3. Check the check box before the policy name and select the policy you want to operate.
4. Click the batch button above the selection list to conduct the batch operation.
5. Select the operation to perform based on your needs, such as batch enabling, disabling, and deleting.