Skip to content

Docs: Security Hub ECR images in use only - #16358

Draft
svader0 wants to merge 1 commit into
DefectDojo:devfrom
svader0:docs/securityhub-ecr-images-in-use
Draft

svader0 wants to merge 1 commit into
DefectDojo:devfrom
svader0:docs/securityhub-ecr-images-in-use

Conversation

@svader0

@svader0 svader0 commented Oct 14, 2026

Copy link
Copy Markdown
Collaborator

Description

Documents the new ECR Images in Use Only toggle of the AWS Security Hub connector (DefectDojo Pro). If the toggle is on, the connector imports findings on an ECR image only if Amazon Inspector reports the image running. The section covers what the toggle keeps and closes, how fresh the Inspector data is, the continuous-scanning need, the inspector2:ListCoverage permission, and what happens when Inspector cannot answer. It also fixes one stale form section name on the page ("Import Configuration").

Merge this together with the matching DefectDojo Pro change, so the page does not publish before the toggle ships.

Test results

Docs only. Page changed: docs/content/connectors/toolreference/security_hub.md.

Documentation

This PR is the documentation.

Documents the ECR Images in Use Only toggle of the Security Hub
connector, its Amazon Inspector permission and its limits. Names the
form section Import Configuration, as the form shows it.
@svader0 svader0 added this to the 3.4.200 milestone Oct 14, 2026
@github-actions github-actions Bot added the docs label Oct 14, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant