scryncloud/scryn-scan-agent repository overview

⁠Scryn Scan Agent (Helm Chart)

Helm chart to deploy the Scryn Scan Agent on Kubernetes. The agent runs security scans and reports results to the Scryn⁠ platform. The chart uses the public image scryncloud/scan_agent from Docker Hub; no image pull secret is required.

⁠Requirements

• Helm 3.8+
• Kubernetes cluster
• Agent token from the Scryn Dashboard⁠ → Agents → Add Agent

⁠Quick start

1. Create a Secret with your agent token (recommended):

kubectl create secret generic scryn-agent-secret \
  --from-literal=API_URL=https://api.scryn.cloud \
  --from-literal=AGENT_TOKEN=your-agent-token-here

1. Install the chart from Docker Hub OCI:

helm install scryn-scan-agent oci://registry-1.docker.io/scryncloud/scryn-scan-agent \
  --version 1.0.0 \
  --set existingSecret.name=scryn-agent-secret

1. Verify the agent is running:

kubectl get pods -l app.kubernetes.io/name=scryn-scan-agent
kubectl logs -l app.kubernetes.io/name=scryn-scan-agent -f

Check that the agent appears as Online in the Scryn dashboard.

⁠Configuration

⁠Using an existing Secret (recommended)

The chart expects a Secret with:

• API_URL – Scryn API base URL (e.g. https://api.scryn.cloud)
• AGENT_TOKEN – Agent token from the Scryn dashboard

If your Secret uses different key names:

helm install scryn-scan-agent oci://registry-1.docker.io/scryncloud/scryn-scan-agent \
  --version 1.0.0 \
  --set existingSecret.name=my-secret \
  --set existingSecret.agentTokenKey=agent-token \
  --set existingSecret.apiUrlKey=api_url

⁠Inline values (token in Helm release)

Alternatively, pass the token and URL directly (stored in the Helm release):

helm install scryn-scan-agent oci://registry-1.docker.io/scryncloud/scryn-scan-agent \
  --version 1.0.0 \
  --set apiUrl=https://api.scryn.cloud \
  --set agentToken=your-agent-token-here

⁠Common overrides

⁠Values reference

• replicaCount – Number of agent replicas (usually 1 per cluster)
• image.repository / image.tag – Agent image (default: scryncloud/scan_agent:latest)
• imagePullSecrets – Only needed for private images; leave empty for the public image
• existingSecret.name – Name of the Secret containing AGENT_TOKEN and API_URL
• apiUrl / agentToken – Used when not using an existing Secret
• agentId – Optional; leave empty to register as a new agent
• resources – CPU/memory requests and limits

⁠Documentation

Full setup and agent documentation: Scryn Docs – Scan Agent⁠.

Image on Docker Hub: scryncloud/scan_agent⁠.