2 years ago

Category: Security

Scopes give you more fine grained control over what access your tokens have to your content and other public content on Docker Hub! It’s been a while since we first introduced tokens into Docker Hub (back in 2019!) and we are now excited to say that we have added the ability for accounts on a Pro or Team plan to apply scopes to their Personal Access Tokens (PATs) as a way to authenticate with Docker Hub. Access tokens can be used as a substitute for your password in Docker Hub, adding scopes to these tokens gives you more fine grained control over what access the machine logged in has.

Read, write: This scope is for read/write within repos you have access to (all the public content on Hub & your private content).

Read only: This scope is read only for all repos you have have access to, this is great when used in production where it only needs to pull content from your repos to run it/