Skip to content

Conversation

mosuhail-vm
Copy link

MDC engineering team confirmed that ARM audience token is required for Defender to scan Images in ACR.

Defender doesnt scan the image if they use Microsoft Entra ACR Audience tokens

a1e22ee9-763f-4635-8259-666fc8ad481e

MDC engineering team confirmed that ARM audience token is required for Defender to scan Images in ACR.

Defender doesnt scan the image if they use Microsoft Entra ACR Audience tokens
Copy link
Contributor

@mosuhail-vm : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

Copy link
Contributor

Learn Build status updates of commit f3951fc:

✅ Validation status: passed

File Status Preview URL Details
articles/container-registry/scan-images-defender.md ✅Succeeded

For more details, please refer to the build report.


> [!NOTE]
>
> For Microsoft Defender for Cloud to scan images in ACR, [**Authentication-as-arm**](container-registry-disable-authentication-as-arm.md) should be enabled
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
> For Microsoft Defender for Cloud to scan images in ACR, [**Authentication-as-arm**](container-registry-disable-authentication-as-arm.md) should be enabled
> For Microsoft Defender for Cloud to scan images in ACR, [**Authentication-as-arm**](container-registry-disable-authentication-as-arm.md) should be enabled.

adding end punctuation

@v-dirichards
Copy link
Contributor

@chasedmicrosoft

Can you review the proposed changes?

Important: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

@prmerger-automator prmerger-automator bot added the aq-pr-triaged C+L Pull Request Review Team label label Sep 12, 2025
@mosuhail-vm
Copy link
Author

@chasedmicrosoft Could you please review this PR.

@v-dirichards
Copy link
Contributor

@chasedmicrosoft Could you review this proposed update to your article and enter #sign-off in a comment if it's ready to merge?

Thanks!

@v-dirichards v-dirichards requested a review from Copilot October 14, 2025 21:18
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds a documentation note clarifying that ARM audience token authentication must be enabled for Microsoft Defender for Cloud to properly scan container images in Azure Container Registry (ACR).

  • Added a note section explaining the ARM authentication requirement for Defender scanning

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.


> [!NOTE]
>
> For Microsoft Defender for Cloud to scan images in ACR, [**Authentication-as-arm**](container-registry-disable-authentication-as-arm.md) should be enabled
Copy link

Copilot AI Oct 14, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The link text 'Authentication-as-arm' doesn't clearly describe what it links to. Consider using more descriptive text like 'ARM audience token authentication' to match the terminology used in the PR description.

Suggested change
> For Microsoft Defender for Cloud to scan images in ACR, [**Authentication-as-arm**](container-registry-disable-authentication-as-arm.md) should be enabled
> For Microsoft Defender for Cloud to scan images in ACR, [**ARM audience token authentication**](container-registry-disable-authentication-as-arm.md) should be enabled

Copilot uses AI. Check for mistakes.

@v-dirichards
Copy link
Contributor

@chasedmicrosoft

Can you review this old PR and determine whether it needs to be closed or merged?

@MicrosoftDocs/public-repo-pr-review-team

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants