> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/security-testing-orchestration/use-sto/harness-security-scanners/shared/custom-scan/container.md).

# Container

These settings apply to Custom Scan steps when both of these conditions are true:

1. The `policy_type` is `orchestratedScan` or `dataLoad`.
2. The `scan_type` is `containerImage`.

* [Container type](#container-type)
* [Container domain](#container-domain)
* [Container project](#container-project)
* [Container tag](#container-tag)
* [Container access Id](#container-access-id)
* [Container access token](#container-access-token)
* [AWS region](#aws-region)

**Container type**

**Key**

```
container_type
```

**Value**

The registry type where the image is stored. Specify one of the following:

Scan a local image built and stored within the context of the current stage (via `/var/run/docker.sock` registered as a stage level volume mount).

```
local_image
```

A registry that uses the Docker Registry v2 API such as [Docker Hub](https://docs.docker.com/registry/spec/api/), [Google Container Registry](https://cloud.google.com/container-registry), or [Google Artifact Registry](https://cloud.google.com/artifact-registry).

```
docker_v2
```

[JFrog Docker Registry](https://jfrog.com/container-registry/).

```
jfrog_artifactory
```

[Amazon Container Registry](https://aws.amazon.com/ecr/).

```
aws_ecr
```

**Container domain**

**Key**

```
container_domain
```

**Value**

The URL of the registry that contains the image to scan. Examples include:

```
docker.io
```

```
app.harness.io/registry
```

```
us-east1-docker.pkg.dev
```

**Container project**

**Key**

```
container_project
```

**Value**

The image name. For non-local images, you also need to specify the image repository. Example: `jsmith/myalphaservice`

**Container tag**

**Key**

```
container_tag
```

**Value**

The image tag. Examples: `latest`, `1.2.3`

**Container access Id**

**Key**

```
container_access_id
```

**Value**

Your access Id to the image registry.

**Container access token**

**Key**

```
container_access_token
```

**Value**

The password or access token used to log in to the image registry. In most cases this is a password or an API key.

You should create a Harness text secret with your encrypted token and reference the secret using the format `<+secrets.getValue("container-access-id")>`. For more information, go to [Add and Reference Text Secrets](/harness-ai/use-harness-platform/secrets/add-use-text-secrets.md).

**AWS region**

**Key**

```
container_region
```

**Value**

The region where the image to scan is located, as defined by the cloud provider such as AWS.