This rule enforces the use of only allowed registries in the FROM instruction of a Dockerfile. It ensures that base images are pulled from trusted and verified sources, reducing the risk of introducing malicious or unverified software into your container environment.
To comply with this rule, always specify base images using registries that are explicitly permitted by your organization’s policies. For example, use FROM python:3.6 or FROM docker.io/python:3.6 instead of FROM randomrepo/python:3.6. This practice helps ensure that the images you use are reliable and vetted.
You can specify the exact list of registries to check by defining the registries argument and separate them with a comma. There is an example of how to tweak your configuration file to add registry1 and registry2.
