Container scanning error with remote docker repository

DevSecOps
1

Hi, I have gitlab omnibus 15.0.5 with dind runners
I’m trying to scan a docker image built & pushed on artifactory

I have theese errors:

- 4 errors occurred:
	* unable to inspect the image (XXXX:VVVVV): Error: No such image: XXXX:VVVVV
	* unable to initialize Podman client: no podman socket found: stat podman/podman.sock: no such file or directory
	* containerd socket not found: /run/containerd/containerd.sock
	* GET https://XXXX:443/api/docker/null/v2/token?scope=repository%3AdXXXX%3Apull&service=XXXXXX: : Authentication is required

I’ve added some CI_GITLAB_FIPS_MODE=false as I understood remote scanning is not possible since 15.X with FIPS, but not clearly understand :

container_scanning:
  variables:
     DOCKER_HOST: tcp://docker:2375
     SECURE_LOG_LEVEL: 'debug'
  tags:
    - dind

services:
  - name: docker:20.10.16-dind

include:
  - template: Security/Container-Scanning.gitlab-ci.yml

    CS_IMAGE: XXX:VVVV
    CS_REGISTRY_USER: $ARTIFACTORY_LOGIN
    CS_REGISTRY_PASSWORD: $ARTIFACTORY_TOKEN
    CI_GITLAB_FIPS_MODE: "false"

It seems simpler if image are pushed on gitlab, maybe this the way.

2

+1
Hello!
have you worked this out ?
i am facing the same problem.
Thank you