Comments (11)
@chen-keinan Thank you! I tried, but am still facing some issues. I get an error "stat externalPolicies: file does not exist" I'm assuming i'm supposed to manually add the policies somehow but cannot figure out how and where exactly?
Thanks for update checking
Are you running latest trivy-operator ?
from trivy-operator.
@chen-keinan believe so, 0.22.1, but I'll check again if there's a newer version. Update: seems there is a 0.22.4, will try using it and update :)
Note: the latest version is trivy-opeartor
helm chart v0.23.1
please use it.
from trivy-operator.
any substitute to that in the meantime? cannot seem to make it work via helmchart in any way :\
from trivy-operator.
@rickymulder sure, sound reasonable
@Maayanchik a workaround will be to use embedded policies instead of downloading
from trivy-operator.
@chen-keinan Thank you! I tried, but am still facing some issues.
I get an error "stat externalPolicies: file does not exist"
I'm assuming i'm supposed to manually add the policies somehow but cannot figure out how and where exactly?
from trivy-operator.
@chen-keinan believe so, 0.22.1, but I'll check again if there's a newer version.
Update: seems there is a 0.22.4, will try using it and update :)
from trivy-operator.
@chen-keinan Hi! took me a little while as i am working in an air-gapped environment, but i managed to deploy it using trivy-operator helm chart v0.23.1 and it seems to be working so far!
thank you so much for your help, but i must ask, how does enabling "useEmbeddedRegoPolicies" affect trivy? does it not use the policies, or does it still use them as long as i mention the correct vars for my environment under "policiesBundle"?
from trivy-operator.
@chen-keinan Hi! took me a little while as i am working in an air-gapped environment, but i managed to deploy it using trivy-operator helm chart v0.23.1! thank you so much for your help, but i must ask, how does enabling "useEmbeddedRegoPolicies" affect trivy? does it not use the policies, or does it still use them as long as i mention the correct vars for my environment under "policiesBundle"?
it do use the policies but its not updated on a daily basis its depend on go lib dependency which updated on demand in oppose to trivy-check package which is updated on daily basis so if a new policy is added you should get it within the next day
from trivy-operator.
I'm offended this was just closed. It's literally so easy. I even wrote the code to apply the option for insecure. I'll push a related MR later today
from trivy-operator.
I'm offended this was just closed. It's literally so easy. I even wrote the code to apply the option for insecure. I'll push a related MR later today
@rickymulder I wasn't aware you were working on it. If you had mentioned that you wanted to handle it, I wouldn't have implemented it. I thought it was urgent enough to get it done.
The issue was closed as I merged PR #2100, which fixes it. If you want to pick up another issue, feel free to do so. I can provide advice if needed.
from trivy-operator.
Oh wow I didn't even see the MR! Ha, whoops.
from trivy-operator.
Related Issues (20)
- combine true not working in custom rego policies HOT 1
- Make the trivy-operator-policies-config config map optional in the helm chart HOT 1
- Stacktrace when scanning k8s containers and no info about the problem HOT 8
- scanJobAnnotations apply to the Pod only and not the Job HOT 1
- When a resource is deleted, a delete report of some other resource is sent instead of the deleted resource. HOT 6
- Need to deploy Trivy operator in OCI ( OKE ) ,
- How to Ignore Specific exposed secret in Trivy-Operator? HOT 4
- Vulnerability scan job unable to pull from private dockerhub container registry if secret uses `--docker-server=docker.io` HOT 27
- Missing target Field in Metrics Endpoint Despite Enabling it in additionalVulnerabilityReportFields
- failed to load rego policies from [externalPolicies] HOT 4
- OperatorHub.io installation documentation is invalid HOT 3
- Review configuration documentation HOT 2
- Installation with Helm and OLM have different version in node.collector.imageRef: ghcr.io/aquasecurity/node-collector HOT 1
- unable to run trivy operator: starting controllers manager: failed to wait for cronjob caches to sync: timed out waiting for cache to be synced HOT 4
- trivy operator throwing constantly reconcile errors HOT 23
- Metrics Report Only One Finding for Multiple Binaries with Same Vulnerability ID
- Could not wait for Cache to sync {"controller": "cronjob", "controllerGroup": "batch", "controllerKind": "CronJob", "error": "failed to wait for cronjob caches to sync: timed out waiting for cache to be synced"} HOT 1
- Redundancy of privateRegistryScanSecretsNames HOT 2
- Regular auto-updates of Trivy databases HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from trivy-operator.