Microsoft Defender for Cloud
Architecture and deployment

Onboard Docker Hub Registries to Microsoft Defender for Containers - Microsoft Defender for Cloud | Microsoft Learn

In brief

The article updates its title and prerequisite section wording, and clarifies that the created access token grants Defender for Cloud read-only access.

What Defender admins need to know

Administrators onboarding Docker Hub registries have clearer prerequisite and access-token guidance.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Onboard Docker Hub registriesRegistries to Microsoft Defender for Containers - Microsoft Defender for Cloud | Microsoft Learn

Microsoft Defender for Containers connects to your Docker Hub organization to assess vulnerabilities in container images. Before you start, make sure you meet the prerequisites.

To connect Docker Hub to Defender for Containers, you need to:

  • Generate an access token for the Docker Hub dedicated user.
  • Supply the Docker Hub dedicated user name and access token when configuring the Defender for Cloud Docker Hub connector.

Before you beginPrerequisites

Make sureEnsure you have these prerequisites:

  • You own a Docker Hub organization account and have permissions to create and manage users at the organization scope.
  • You created a dedicated user with your organization email account (foraccount, for example, [email protected]) for Defender for Cloud connectivity only.

Create a user in Docker Hub

To create a user in Docker Hub:

  1. Verify that you can create and manage users in your Docker Hub organization.

  2. Invite the dedicated user viaover email to access all repositories in your organization as an "Editor".Editor.

    Screenshot of select an invite member.

    Note

    While the Editor privilege allows a user to modify Docker Hub registries, the access token created will allowyou create grants Defender for Cloud read-only access.

  3. An email is sent to the dedicated user with a link to verify the email address. Select the verify link in the email and complete the process of creating a Docker Hub dedicated user.

Create an access token for the dedicated Docker Hub user