SHOW IMAGE REPOSITORIES¶
Lists the image repositories for which you have access privileges.
You can use this command to list the repositories in the current database and schema for the session, a specified database or schema, or your entire account.
Syntax¶
Parameters¶
LIKE 'pattern'Optionally filters the command output by object name. The filter uses case-insensitive pattern matching, with support for SQL wildcard characters (
%and_).For example, the following patterns return the same results:
... LIKE '%testing%' ...... LIKE '%TESTING%' ...
Default: No value (no filtering is applied to the output).
[ IN ... ]Optionally specifies the scope of the command. Specify one of the following:
ACCOUNTReturns records for the entire account.
DATABASE,
DATABASE db_nameReturns records for the current database in use or for a specified database (
db_name).If you specify
DATABASEwithoutdb_nameand no database is in use, the keyword has no effect on the output.Note
Using SHOW commands without an
INclause in a database context can result in fewer than expected results.Objects with the same name are only displayed once if no
INclause is used. For example, if you have tablet1inschema1and tablet1inschema2, and they are both in scope of the database context you’ve specified (that is, the database you’ve selected is the parent ofschema1andschema2), then SHOW TABLES only displays one of thet1tables.SCHEMA,
SCHEMA schema_nameReturns records for the current schema in use or a specified schema (
schema_name).SCHEMAis optional if a database is in use or if you specify the fully qualifiedschema_name(for example,db.schema).If no database is in use, specifying
SCHEMAhas no effect on the output.
If you omit
IN ..., the scope of the command depends on whether the session currently has a database in use:- If a database is currently in use, the command returns the objects you have privileges to view in the database. This has the
same effect as specifying
IN DATABASE. - If no database is currently in use, the command returns the objects you have privileges to view in your account. This has the
same effect as specifying
IN ACCOUNT.
STARTS WITH 'name_string'Optionally filters the command output based on the characters that appear at the beginning of the object name. The string must be enclosed in single quotes and is case sensitive.
For example, the following strings return different results:
... STARTS WITH 'B' ...... STARTS WITH 'b' ...
Default: No value (no filtering is applied to the output)
LIMIT rows [ FROM 'name_string' ]Optionally limits the maximum number of rows returned, while also enabling “pagination” of the results. The actual number of rows returned might be less than the specified limit. For example, the number of existing objects is less than the specified limit.
The optional
FROM 'name_string'subclause effectively serves as a “cursor” for the results. This enables fetching the specified number of rows following the first row whose object name matches the specified string:- The string must be enclosed in single quotes and is case sensitive.
- The string does not have to include the full object name; partial names are supported.
Default: No value (no limit is applied to the output)
Note
For SHOW commands that support both the
FROM 'name_string'andSTARTS WITH 'name_string'clauses, you can combine both of these clauses in the same statement. However, both conditions must be met or they cancel out each other and no results are returned.In addition, objects are returned in lexicographic order by name, so
FROM 'name_string'only returns rows with a higher lexicographic value than the rows returned bySTARTS WITH 'name_string'.For example:
... STARTS WITH 'A' LIMIT ... FROM 'B'would return no results.... STARTS WITH 'B' LIMIT ... FROM 'A'would return no results.... STARTS WITH 'A' LIMIT ... FROM 'AB'would return results (if any rows match the input strings).
Access control requirements¶
Any of the following repository privileges grants the permission to see repositories in the SHOW IMAGE REPOSITORIES output. If you don’t have any of these privileges, SHOW IMAGE REPOSITORIES will return an empty result.
| Privilege | Object | Notes |
|---|---|---|
| READ | Image repository | To pull an image from a repository, the role requires this permission. |
| WRITE | Image repository | To push an image to a repository, the role requires this permission. |
| OWNERSHIP | Image repository | To create a repository, the role requires this permission. |
Operating on an object in a schema requires at least one privilege on the parent database and at least one privilege on the parent schema.
For instructions on creating a custom role with a specified set of privileges, see Creating custom roles.
For general information about roles and privilege grants for performing SQL actions on securable objects, see Overview of Access Control.
Output¶
The command output provides repository properties and metadata in the following columns:
| Column | Description |
|---|---|
created_on | Date and time when the repository was created. |
database_name | Database in which the repository was created. |
schema_name | Schema in which the repository was created. |
repository_url | URL of the image repository. You need this URL to push (for example, docker push) or pull (for example, docker pull) images from the repository. |
owner | Role that owns the repository. |
owner_role_type | The type of role that owns the object; either ROLE or DATABASE_ROLE. |
comment | Description for the repository. |
encryption | Encryption type configured for the image repository. |
privatelink_repository_url | URL of the image repository, accessible only via Private Connectivity. The column is returned only for Business Critical accounts. |
Usage notes¶
- The command doesn’t require a running warehouse to execute.
- The command only returns objects for which the current user’s current role has been granted at least one access privilege.
- The MANAGE GRANTS access privilege implicitly allows its holder to see every object in the account. By default, only the account administrator (users with the ACCOUNTADMIN role) and security administrator (users with the SECURITYADMIN role) have the MANAGE GRANTS privilege.
-
To post-process the output of this command, you can use the pipe operator (
->>) or the RESULT_SCAN function. Both constructs treat the output as a result set that you can query.For example, you can use the pipe operator or RESULT_SCAN function to select specific columns from the SHOW command output or filter the rows.
When you refer to the output columns, use double-quoted identifiers for the column names. For example, to select the output column
type, specifySELECT "type".You must use double-quoted identifiers because the output column names for SHOW commands are in lowercase. The double quotes ensure that the column names in the SELECT list or WHERE clause match the column names in the SHOW command output that was scanned.
-
The command returns a maximum of ten thousand records for the specified object type, as dictated by the access privileges for the role used to execute the command. Any records above the ten thousand records limit aren’t returned, even with a filter applied.
To view results for which more than ten thousand records exist, query the corresponding view (if one exists) in the Snowflake Information Schema.
Examples¶
The following two examples list repositories in the current database and current schema:
The following example lists repositories in the current database and the specified schema:
The following example lists repositories in the current database and all schemas:
The following example lists repositories in the specified database and all schemas:
The following example lists repositories in the current account (all databases and all schemas):
Sample output: