Scan samples for Supply Chain Security Tools - Scan

This section provides samples on multiple use cases for Supply Chain Security Tools (SCST) - Scan that you can copy to your cluster for testing purposes.

Note

This topic assumes that you use SCST - Scan 1.0 because, although it is deprecated, it is still the default option in Supply Chain with Testing in this version of Tanzu Application Platform. For more information, see Add testing and scanning to your application.

VMware recommends using SCST - Scan 2.0 instead because SCST - Scan 1.0 will be removed from future versions of Tanzu Application Platform. For more information, see SCST - Scan versions.

• Running a sample public image scan with compliance check
• Running a sample public source scan with compliance check
• Running a sample private image scan
• Running a sample private source scan
• Running a sample public source scan of a blob/tar file