> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/security-testing-orchestration/3.0/use-sto/sto-scanner-configuration/docker-content-trust-dct-scanner-reference.md).
# Docker Content Trust (DCT) step configuration
You can run container image scans and ingest results from [Docker Content Trust (DCT)](https://docs.docker.com/engine/security/trust/).
### Workflow descriptions
Orchestration/extraction workflows
Ingestion workflows
### Custom Scan step settings for Docker Content Trust
#### Scanner settings
These settings are required for most scanners. For more information, go to the reference for the scanner integration you're setting up.
* [Product name](#product-name)
* [Scan type](#scan-type)
* [Policy type](#policy-type)
* [Product config name](#product-config-name)
**Product name**
The scanner name. This is required for all Custom Scan steps.
**Key**
```
product_name
```
**Value**
```
docker-content-trust
```
**Scan type**
The target type to scan.
**Key**
```
scan_type
```
**Value**
```
containerImage
```
**Policy type**
The [scan mode](/security-testing-orchestration/3.0/new-to-sto/key-concepts/sto-workflows-overview.md) to use.
**Key**
```
policy_type
```
**Value**
Must be one of the following.
```
orchestratedScan
```
```
ingestionOnly
```
**Product config name**
Required for most scanner integrations.
**Key**
```
product_config_name
```
**Value**
```
default
```
#### Target and variant
#### Container image
#### Ingestion file
#### Fail on Severity