Docker Hub Integration

Docker Hub is a cloud-based repository service provided by Docker, Inc., the company behind the Docker containerization platform. It serves as a centralized platform for storing, sharing, and distributing Docker container images.

How does this integration help Sprinto

The integration primarily helps Sprinto retrieve the user account details like user name, email address, role, etc. It helps Sprinto to map and check if the user with access offboards the organization. The org role information also helps Sprinto ensure only the configured valid roles access the system.

Sprinto checks for DockerHub

Following are the available Sprinto checks for DockerHub integration:

Sprinto check

Reference procedure

User should be identified

DockerHub access should be removed for offboarded user

Critical system access control should be configured

User access to Critical System should be valid

How to fix

Note: The user access to the critical system becomes valid if the respective Org role is added to the system.

Before you begin

  • Log in to Sprinto as administrator.

  • Ensure you have “Admin” access on the DockerHub account you want to integrate.

  • Ensure your DockurHub account is on the Docker Business plan.

  • Sprinto uses Truto.one as the integration partner to build this integration.

Integrate Sprinto with DockerHub

  1. Get the API key from DockerHub account.

    • Log in to your Docker account using your credentials.

    • Create an API token from your DockerHub account. Refer to generate API token for detailed instructions.

    • Copy the generated API token and save it securely. We will need this API key to build integration on Sprinto.

  2. Integrate DockerHub on Sprinto.

    • Go to Security Hub > Settings > Integrations > Available, and click Connect next to DockerHub.

    • Read the on-screen instructions, and click Next.

    • On Integration page, select the acknowledgment checkbox and click Connect to DockerHub. Note: Ensure you have a pop-up window enabled on your browser.

    • On Authentication page, enter the SCIM API Token and SCIM URL copied from Step 1 in the fields, and click Connect.

  3. Add DockerHub as a critical system.

    • On Sprinto app, go to Security Hub > Access > Critical systems, and click + Add Critical System.

    • On Add Critical System page, select Docker and click Add System.

  4. Configure valid users for DockerHub.

    • Go to Security Hub > Access > Critical systems, and select DockerHub.

    • On the Summary page, click Configure Now next to the DockerHub account.

    • On the Manage page, click Configure next to access validity.

    • Choose one of the options to define valid users based on roles.

Final Step

After completing Step 4, allow 15 to 20 minutes for Sprinto to finish the data syncing process. Sprinto may take a few hours to evaluate the synced data and activate relevant Sprinto checks. If needed, go to Security Hub > Access > Critical System to check for pending tasks next to DockerHub.

If you need any assistance with the integration, kindly get in touch with Sprinto support.

Last updated