# Anchore CLI The Anchore CLI provides a command line interface on top of the Anchore Engine REST API. Anchore CLI will try to connect to the Anchore Engine at http://localhost/v1 with no authentication. The username, password and URL for the server can be passed to the Anchore CLI as command line arguments ## Install the Task ``` kubectl apply -f https://raw.githubusercontent.com/tektoncd/catalog/main/task/anchore-cli/0.1/anchore-cli.yaml ``` ## Parameters - name: ARGS description: The Arguments to be passed to anchore command. type: array - name: ANCHORE_CLI_IMAGE default: anchore/engine-cli description: Anchore cli image to be used - name: ANCHORE_CLI_URL default: http://localhost:8228/v1/ description: Anchore engine URL. - name: IMAGE_NAME default: openjdk:7-jre-alpine description: Image to be scanned * **ARGS:** Arguments to be passed to anchore command * **ANCHORE_CLI_IMAGE:** Anchore cli image to be used * **ANCHORE_CLI_URL:** Anchore Server URL * **IMAGE_NAME:** Image to be scanned #PLATFORK ## Platforms The Task can be run on `linux/amd64` platform. ## Usage ## Usage After creating the task, you should now be able to execute `anchore cli` commands by specifying the command you would like to run as the `ARGS` or `SCRIPT` param. The `ARGS` param takes an array of aws subcommands that will be executed as part of this task and the `SCRIPT` param takes the multiple commands that you would like to run on aws CLI. Secret` give an example of how to give credentials for logging in. To create a secret you can use the following command kubectl create secret generic tower-creds --from-literal=username=ANCHORE_CLI_PASS --from-literal=password=ANCHORE_CLI_USER or apply below manifest which is in samples folder --- kind: Secret apiVersion: v1 metadata: name: anchore-cli-secret data: ANCHORE_CLI_PASS: YWRtaW50b3dlcg== ANCHORE_CLI_USER: YWRtaW4= type: Opaque ---