> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cybedefend.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Red Hat Quay

> Scan container images stored in Red Hat Quay registry.

**Red Hat Quay** is an enterprise-grade container registry. CybeDefend integrates with both Quay.io (SaaS) and self-hosted Quay instances to scan your container images.

## CybeDefend Configuration

| Field                             | Description              | Example                       |
| --------------------------------- | ------------------------ | ----------------------------- |
| **Quay Host**                     | Quay hostname            | `quay.io`                     |
| **Namespace (Organization/User)** | Organization or username | `myorganization`              |
| **Robot Account Username**        | Robot account username   | `myorganization+deploy_robot` |
| **Robot Account Token**           | Robot account token      | `*****`                       |
| **Description**                   | Optional description     | `Production Quay registry`    |

## How to Configure Quay.io Container Registry

<Steps>
  <Step title="Access Quay.io">
    Connect to your Quay.io account and navigate to your repository
  </Step>

  <Step title="Create Robot Account">
    Go to **Repository Settings** → **Robot Accounts** and create a new robot account
  </Step>

  <Step title="Grant Read Access">
    Grant the robot account **read access** to your repository
  </Step>

  <Step title="Copy Credentials">
    Copy the robot username and token and paste them in CybeDefend
  </Step>
</Steps>

<Warning>
  The robot token is only displayed once when created. Make sure to copy it immediately before closing the dialog.
</Warning>

## Security Best Practices

<CardGroup cols={2}>
  <Card title="Use Robot Accounts" icon="robot">
    Prefer robot accounts over personal credentials for automated scanning.
  </Card>

  <Card title="Minimal Permissions" icon="shield-halved">
    Grant only read access for scanning operations.
  </Card>

  <Card title="Rotate Tokens" icon="rotate">
    Rotate robot account tokens regularly to minimize exposure.
  </Card>

  <Card title="Scope to Repositories" icon="folder-tree">
    Limit robot account access to specific repositories only.
  </Card>
</CardGroup>

## Troubleshooting

<AccordionGroup>
  <Accordion title="Authentication Failed" icon="circle-exclamation">
    * Verify robot username format: `organization+robot_name`
    * Check if the robot account has been deleted
    * Ensure the token is correct
  </Accordion>

  <Accordion title="Permission Denied" icon="ban">
    * Verify robot account has read access to the repository
    * Check repository visibility settings
  </Accordion>
</AccordionGroup>