Plugin: Quay Registry Tools

[bobbyjohnstx]

Summary

Tools for searching, inspecting, and managing container images in Quay registries with built-in Clair vulnerability scanning.

Plugin Details

• Red Hat product: Quay 3.17
• Plugin hooks: tool, auth
• Complexity: Low
• Priority: 11 (Low-Medium value)

Tools

Tool	Description
quay_search	Search repos by name/keyword (name, description, stars, last modified)
quay_tags	List tags with digest, size, last modified, security scan status
quay_manifest	Get manifest for a tag (layers, architecture, OS, config)
quay_vulnerabilities	Get Clair vulnerability scan results (CVEs with severity, package, fix version)
quay_labels	Get or set labels on a manifest (permission prompt for set)

Auth

• Quay OAuth2 application token or robot account credentials
• Prompts for Quay registry URL (default: quay.io) and auth method

Use case

LLM building a container image: checks Quay for base images, inspects tags, verifies vulnerability scan status before selecting a base, and checks new image scan results after building.

Pairs with

• RHACS Scanner for policy-level checks
• Lightwell Dependency Checker for application-layer dependency scanning

---

From: Red Hat Product Integration Plugin Ideas