Skip to content

Update Agentless Scanning compatibility: GAR Preview, RDS beta, EKS Fargate #38137

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
janine-c merged 7 commits into from
Jul 16, 2026
+4 −3
Merged

Update Agentless Scanning compatibility: GAR Preview, RDS beta, EKS Fargate #38137

Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
5c8eafc
Update Agentless Scanning compatibility: GAR Preview, RDS beta, EKS F…
leo-wang-dd Jul 13, 2026
043b754
Update compatibility.md
leo-wang-dd Jul 13, 2026
5768a07
merge master
janine-c Jul 13, 2026
7e06b6a
Picky capitalization; remove duplicates
janine-c Jul 13, 2026
19437ff
Update compatibility.md
leo-wang-dd Jul 15, 2026
0cafd94
Merge branch 'master' into leo/agentless-compatibility-updates
leo-wang-dd Jul 15, 2026
d2e9959
Merge in master; fix conflict
janine-c Jul 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions ...en/security/cloud_security_management/setup/agentless_scanning/compatibility.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,9 +18,9 @@
| Encryption | AWS </br> Unencrypted </br> Encrypted - Platform Managed Key (PMK) and Customer Managed Key (CMK) | Encrypted - Platform Managed Key (PMK): Azure Disk Storage Server-Side Encryption, Encryption at host </br> **Note**: Encrypted - Customer Managed Key (CMK) is **not** supported | Encrypted - Platform Managed Key (PMK): Persistent Disk Encryption, Confidential VM </br> **Note**: Encrypted - Customer Managed Encryption Key (CMEK) and Customer-Supplied Encryption Keys (CSEK) are **not** supported |
| Container runtime | Docker, containerd </br> **Note**: CRI-O is **not** supported | Docker, containerd </br> **Note**: CRI-O is **not** supported | Docker, containerd </br> **Note**: CRI-O is **not** supported |
| Serverless | AWS Lambda <br> AWS Fargate for ECS | Azure Container Apps and Azure Container Instances<br />**Note**: Requires the latest agentless scanner. See [Update Agentless Scanning][17]. | Cloud Run (container deployment only — not from GitHub repos or inline editors) |
| Kubernetes | EKS on EC2 nodes only </br> **Note**: Fargate-backed EKS nodes are **not** supported | AKS on virtual machines and Virtual Machine Scale Sets (VMSS) </br> **Note**: AKS on ACI is **not** supported | GKE Standard only </br> **Note**: GKE Autopilot and image streaming are **not** supported |
| Kubernetes | EKS on EC2 nodes </br> EKS on Fargate </br> **Note**: EKS on Fargate requires the [Datadog Cluster Agent][18] to be installed | AKS on virtual machines and Virtual Machine Scale Sets (VMSS) </br> **Note**: AKS on ACI is **not** supported | GKE Standard only </br> **Note**: GKE Autopilot and image streaming are **not** supported |

Check warning on line 21 in content/en/security/cloud_security_management/setup/agentless_scanning/compatibility.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.abbreviations 

Use abbreviations for common industry terms: 'VM' instead of 'Virtual Machine'.
| Application languages (in hosts and containers) | Java, .Net, Python, Node.js, Go, Ruby, Rust, PHP, Swift, Dart, Elixir, Conan, Conda | Java, .Net, Python, Node.js, Go, Ruby, Rust, PHP, Swift, Dart, Elixir, Conan, Conda | Java, .Net, Python, Node.js, Go, Ruby, Rust, PHP, Swift, Dart, Elixir, Conan, Conda |
| Container Registries | Amazon ECR (public and private): scans running container images and the last 1,000 pushed images at rest | ACR: scans running container images only<br />**Note:** To request at-rest registry scanning or to increase the number of at-rest images to scan, contact [Datadog Support][16] | Google Artifact Registry: scans images from running workloads only<br />**Note:** To request at-rest registry scanning or to increase the numbers of at-rest images to scan, contact [Datadog Support][16] |
| Container Registries | Amazon ECR (public and private): Scans running container images and the last 1,000 pushed images at rest | ACR: Scans running container images only<br />**Note:** To request at-rest registry scanning or to increase the number of at-rest images to scan, contact [Datadog Support][16] | Google Artifact Registry (Preview): Scans images from running workloads only<br />**Note:** Google Artifact Registry at rest scanning support is in Preview. To request access, contact [Datadog Support][16] |
| Host Images | AMI | Not supported | Not supported |
| Sensitive Data (SDS) | S3 | Not supported | Not supported |

Expand Down Expand Up @@ -69,7 +69,7 @@
| Registry | Support level | Notes |
|---------------------------------|---------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Amazon ECR (public and private) | GA | Scans running container images **and** the last 1,000 pushed images at rest (by date). This is the only registry with at-rest scanning support<br />**Note:** To increase the number of at-rest images to scan, contact [Datadog Support][16] |
| Google Artifact Registry (GAR) | GA | Scans images tied to running workloads (Cloud Run, GKE) only<br />**Note**: To request at-rest registry scanning, contact [Datadog Support][16] |
| Google Artifact Registry (GAR) | Preview | Scans images tied to running workloads (Cloud Run, GKE) only<br />**Note**: Google Artifact Registry at-rest scanning support is in Preview. To request access, contact [Datadog Support][16] |
| Azure Container Registry (ACR) | GA | Scans running container images from Azure Container Apps and Azure Container Instances only<br />**Note**: To request at-rest registry scanning, contact [Datadog Support][16] |

**Note**: Container image scanning from registry is only supported if you have installed Agentless with:
Expand Down Expand Up @@ -102,3 +102,4 @@
[15]: https://ubuntu.com/security/cve
[16]: /help
[17]: /security/cloud_security_management/setup/agentless_scanning/update
[18]: /containers/cluster_agent/setup/
Loading