Skip to content

Trivy-k8s does not use the vulnerability database cache #1837

Description

@o1oo11oo

➹ New Feature implementation request

Is your feature request related to a problem?

The recently added trivy-k8s scanner (#1694) does not use the trivy database cache (#1760) to minimize downloads of the trivy vulnerability database.

Describe the solution you'd like

Ideally, trivy-k8s would use the database cache as well. Unfortunately trivy does not support client/server mode for k8s scans. Adding it was already requested in aquasecurity/trivy#4414, but the recommended solution is to use the trivy-operator.

Describe alternatives you've considered

The docs might need to be updated again to specify the possible rate limiting issue.

Additional context

I already tried implementing it before running into the output: FATAL unknown flag: --server

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions