Skip to content

Trivy-k8s does not use the vulnerability database cache #1837

@o1oo11oo

Description

@o1oo11oo

➹ New Feature implementation request

Is your feature request related to a problem?

The recently added trivy-k8s scanner (#1694) does not use the trivy database cache (#1760) to minimize downloads of the trivy vulnerability database.

Describe the solution you'd like

Ideally, trivy-k8s would use the database cache as well. Unfortunately trivy does not support client/server mode for k8s scans. Adding it was already requested in aquasecurity/trivy#4414, but the recommended solution is to use the trivy-operator.

Describe alternatives you've considered

The docs might need to be updated again to specify the possible rate limiting issue.

Additional context

I already tried implementing it before running into the output: FATAL unknown flag: --server

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions