aquasecurity / aquasecurity/trivy-operator

Specify option to scan container images

Open
#577 2 comments 0 reactions 0 assignees View on GitHub
kind/feature priority/backlog target/kubernetes
Dominant language
Go
Stars
1.9k
Forks
285
Avg merge
1d 21h
Merged PRs (30d)
4

Description

I want to make it possible to specify arbitrary options that Trivy uses to scan container images.
As an example, a security management product "yamory" I use requires package information in a scan result.
So, I need to set --list-all-pkgs option when Trivy scans.
This feature would help with the integration of various products.

https://yamory.io/ (Japanese site only)

Contributor guide

Open the contributing guide

Research direction

Start by locating the container image scanning entry point and how Trivy scan options are currently configured. Trace how an arbitrary option reaches the scan, then verify the integration by passing --list-all-pkgs and confirming that package information appears in the scan result.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.