Per warnings found in the most recent executions of tfsec, the Aqua team has shifted their focus to Trivy. tfsec will continue to be available, but it is unclear just how often it will be kept updated.
Action requested
Migrate from tfsec to Trivy.
Acceptance Criteria
GH action for tfsec is properly modified to use Trivy.
Scans run successfully.
Any exclusions are modified to use Trivy's supported format.
Background
Per warnings found in the most recent executions of
tfsec, the Aqua team has shifted their focus to Trivy.tfsecwill continue to be available, but it is unclear just how often it will be kept updated.Action requested
Migrate from
tfsecto Trivy.Acceptance Criteria
Additional context
For additional information, consult the documentation and migration guide found at the following: https://github.com/aquasecurity/trivy