devopstales/trivy-operator repository overview

⁠Trivy Operator

Trivy Operator is a Kubernetes Operator for scheduled scans of images and an Admission Control

Inspirated by knqyf263⁠'s trivy-enforcer⁠ and fleeto⁠'s trivy-scanner⁠.

⁠Supported tags and respective Dockerfile links

See Github Repo⁠

⁠Simple Tags

• 2.5⁠
• 2.4⁠
• 2.3⁠
• 2.2⁠
• 2.1⁠
• 2.0⁠
• 1.0⁠

⁠Schefuled Image scans

Default every 5 minutes execute a scan script. It will get image list from all namespaces with the label trivy-scan=true, and then scan these images with trivy. Finally we will get metrics on http://[pod-ip]:9115/metrics

⁠Trivy Image Validator

The admission controller function can be configured as a ValidatingWebhook in a k8s cluster. Kubernetes will send requests to the admission server when a Pod creation is initiated. The admission controller checks the image using trivy if it is in a namespace with the label trivy-operator-validation=true.