Docker

Connect Docker to collect infrastructure evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Docker:

   1. Sign in to Docker Home, select your avatar, and choose Account settings.
   2. Select Personal access tokens, then Generate new token.
   3. Enter a Description (for example Safeguard read-only), set an Expiration date, and under Access permissions choose Read.
   4. Select Generate, then copy the token on screen; you cannot retrieve it after you leave the screen.

   Docker shows the secret only once, so copy it before you leave the page.

   Docker's public documentation does not cover every step.

   Source: docs.docker.com, checked 2026-10-07.

2. On Compliance › Connectors, open Docker, click Connect, choose API token and fill in:

   Field	What to enter
   Organization	Required. The Docker Hub organization (namespace) to check, as it appears in hub.docker.com/orgs/<name>.
   Docker ID	Required.
   Personal access token	Required. Create under Account settings → Personal access tokens with read-only access. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Docker and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Infrastructure connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks