aquasecurity / aquasecurity/trivy-operator
Specify option to scan container images
- Dominant language
- Go
- Stars
- 1.9k
- Forks
- 285
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 4
Description
I want to make it possible to specify arbitrary options that Trivy uses to scan container images.
As an example, a security management product "yamory" I use requires package information in a scan result.
So, I need to set --list-all-pkgs option when Trivy scans.
This feature would help with the integration of various products.
https://yamory.io/ (Japanese site only)
Contributor guide
Research direction
Start by locating the container image scanning entry point and how Trivy scan options are currently configured. Trace how an arbitrary option reaches the scan, then verify the integration by passing --list-all-pkgs and confirming that package information appears in the scan result.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100