{"repo":"aquasecurity/trivy-operator","free":true,"listed":false,"github":"https://github.com/aquasecurity/trivy-operator","clone":"git clone https://github.com/aquasecurity/trivy-operator.git","description":"Kubernetes-native security toolkit","language":"Go","stars":1923,"topics":["cloud-native","golang","kubernetes","operator","security","misconfiguration","octoberfest","vulnerability-detection","vulnerability-scanners","security-tools"],"license":"Apache-2.0","category":"deployment-docker-iac","readme_excerpt":"Kubernetes-native security toolkit. (Documentation) [![GitHub Release][release-img]][release] [![Build Action][action-build-img]][action-build] [![Release snapshot Action][action-release-snapshot-img]][action-release-snapshot] [![Go Report Card][report-card-img]][report-card] [![GitHub All Releases][github-all-releases-img]][release] Introduction The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes [Custom Resource Definitions], which become accessible through the Kubernetes API. The Operator does this by watching Kubernetes for state changes and automatically triggering security scans in response. For example, a vulnerability scan is initiated when a new Pod is created. This way, users can find and view the risks that relate to different resources in a Kubernetes-native way. In-cluster Security Scans The Trivy Operator automatically generates and updates security reports. These reports are generated in response to new workload and other changes on a Kubernetes cluster, generating the following reports: - Vulnerability Scans: Automated vulnerability scanning for Kubernetes workloads, control-plane and node components (api-server, controller-manager, kubelet and etc) - ConfigAudit Scans: Automated configuration audits for Kubernetes resources with predefined rules or custom Open Policy Agent (OPA) policies. - Exposed Secret Scans: Automated secret scans which find and det","default_branch":null,"files":null,"tree":[],"storefront":"/r/aquasecurity","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/aquasecurity/trivy-operator/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}