Integrations

Integrating with WizOS

How to integrate with WizOS Images using Cloudsmith

WizOS, offered by Wiz, is a catalog of hardened container base images featuring:

  • Near-zero CVEs, with strict SLAs (7 days for criticals, 14 for highs/mediums)
  • Cryptographically verifiable provenance and signatures
  • Minimal, built from source with only necessary components using glibc for broad compatibility

You can retrieve these images through Cloudsmith by enabling the upstream to the WizOS Registry.

Adding WizOS as an Upstream

Here's how you can integrate the WizOS Registry into your Cloudsmith account:

  1. Configure Upstream Proxying
    In your Cloudsmith repository, go to the Upstream Proxying settings.
    Click the green "Create Upstream" button and select the Docker format.
    Provide a descriptive name for the upstream, e.g., WizOS, and specify the URL.
    Enter the WizOS Registry URL:
    • https://registry.os.wiz.io
    • Set the desired priority.
    • Select Cache and Proxy.
  2. Configure credentials Configure your WizOS Registry credentials which are obtained from your WizOS tenant.
    • On the top right, click Profile > Tenant Info.
    • In the General tab, scroll down to the Wiz Registry Credentials section and choose WizOS Registry.
    • Use the credentials listed to authenticate to the WizOS registry.

Pull a WizOS Image with Docker Native Tooling

Here's an example of how you would pull the wizos-base image into Cloudsmith after you've configured your Cloudsmith upstream:

  1. Configure your Cloudsmith upstream for WizOS using the instructions above.

  2. Ensure Docker is installed on your system. If not, go here to get started with Docker.

  3. Open a terminal.

  4. Login to Docker with your Cloudsmith username and token, with the command: docker login docker.cloudsmith.io

  5. Pull the latest wizos-base image by running:

    text
    docker pull docker.cloudsmith.io/ORGANIZATION/REPOSITORY/wizos-base:latest

    Note: Replace ORGANIZATION and REPOSITORY with your Cloudsmith organization and repository, respectively.

  6. Check your Cloudsmith repository to find the newly added WizOS image.