aquasecurity / aquasecurity/trivy-plugin-webhook

Postee sending empty email for scanned image

Open
#20 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
2
Forks
9
PR merge metrics
No merged PRs in 30d

Description

Getting empty report via email for image scan.

### Received Email results:

image

### cfg.yaml
```
actions:
- type: email
name: my-email
user:
host: x.x.x.x
port: 25
sender: xxxx@xxx.com
recipients:
- xxxx
password:
enable: true
routes:
- name: email-route
input: contains(input.Metadata.OS.Family, "alpine")
#input: |
#contains(input.image,"alpine")
#input: input
actions:
- my-email
template: legacy
templates:
- name: slack-template
rego-package: postee.vuls.slack
- name: rego-html
rego-package: postee.vuls.html
- name: legacy
legacy-scan-renderer: html
- name: legacy-slack
legacy-scan-renderer: slack
- name: custom-email
url: null
- name: trivy-operator-jira
rego-package: postee.trivyoperator.jira
- name: trivy-operator-slack
rego-package: postee.trivyoperator.slack
templates:
- name: trivy-raw-json
rego-package: postee.rawmessage.json
name: tenant
AquaServer: https://xxxxxxxxxxx.com
```

### Trivy webhook run command:

`trivy webhook --url=http://postee-service.trivy-tools.svc.cluster.local:8084 -- image --format=json --ignore-unfixed --severity HIGH,CRITICAL,MEDIUM`

### Postee log:

image

### Trivy webhook run command result:

image

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the image scan with the Trivy webhook command and the cfg.yaml configuration, then trace how the legacy HTML template is rendered for the email action. Compare the generated report with the empty received email and use the Postee logs and webhook result shown in the issue to identify where content is lost. Done means image-scan emails contain the expected report.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
backend, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.