Container Registry Webhook should be active

Medium Azure General webhooks-container-registry-webhook-active

Applies to

Microsoft.ContainerRegistry/registries/webhooks

What CGPulse checks

A resource passes this rule when status must equal enabled. Anything else is reported as a finding with the evaluated property value attached as evidence.

How to fix it

Enable the webhook to receive notifications on image push and registry events. In Azure Portal: Container Registry > Webhooks > enable the webhook. See: https://learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook

CLI

az acr webhook update --ids "{id}" --status enabled

Terraform

resource "azurerm_container_registry_webhook" "{name}" {
  name                = "{name}"
  resource_group_name = "{rg}"
  registry_name       = "{parent}"
  location            = var.location
  service_uri         = "https://example.com/webhook"
  status              = "enabled"
  actions             = ["push"]
}

Compliance frameworks

Cloud Security: Azure Foundations

Is your environment compliant with this rule?

CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.

Run a free scan