Skip to main content
GitHub Container Registry (GHCR) is GitHub’s container registry for Docker images. CybeDefend integrates with GHCR to scan both public and private container images.

​
CybeDefend Configuration

FieldDescriptionExample
GitHub UsernameYour GitHub username or organizationmyorg
Personal Access TokenGitHub PAT with read:packages scopeghp_xxxxxxxxxxxx
DescriptionOptional description for the registryProduction GitHub Registry

​
How to Create a Personal Access Token (PAT) in GitHub

1

Access GitHub Settings

Go to GitHub → Settings → Developer settings → Personal access tokens → Tokens (classic)
2

Generate New Token

Click Generate new token and select Generate new token (classic)
3

Select Scopes

Select the required scopes:
  • read:packages (read access)
  • or write:packages (read/write access)
4

Copy Token

Copy the generated token and paste it in CybeDefend
The Personal Access Token is only displayed once when created. Make sure to copy it immediately before leaving the page.

​
Security Best Practices

Use Fine-Grained Tokens

Prefer fine-grained PATs over classic tokens when possible for better security.

Minimal Scopes

Only grant read:packages scope for scanning operations.

Set Expiration

Always set an expiration date for your tokens to limit exposure.

Rotate Tokens Regularly

Change your access tokens periodically to minimize security risks.

​
Troubleshooting

  • Verify the PAT has read:packages scope
  • Check if the token has expired
  • Ensure the username matches the token owner
  • Verify you have access to the repository
  • Check package visibility settings
  • Ensure organization membership for private packages