Azure Container Registry (ACR) Isn't Configured to Use Signed/Trusted Images misconfiguration detect

Azure Container Registry (ACR) Isn't Configured to Use Signed/Trusted Images misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_164
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

Using signed or trusted images ensures that the images being used in your deployments are verified and not tampered with. Enabling this feature in Azure Container Registry adds a layer of security by ensuring only signed images can be pulled and run.

This rule checks whether Azure Container Registry has trust policy enabled for signed images.

How to Fix

Resource: azurerm_container_registry

• Arguments: trust_policy_enabled [source,go]

---

resource "azurerm_container_registry" "example" { name = "exampleContainerRegistry" resource_group_name = azurerm_resource_group.example.name location = azurerm_resource_group.example.location sku = "Standard" admin_enabled = false

If using azurerm version below 4.0

• trust_policy {
• enabled = true
• }

If using azurerm version 4.0 and above

• trust_policy_enabled = true }

---