aquasecurity / trivy-operator

Kubernetes-native security toolkit
https://aquasecurity.github.io/trivy-operator/latest
Apache License 2.0
1.29k stars 214 forks source link

additionalVulnerabilityReportFields is not working as expected. #2242

Open vijay2910 opened 3 months ago

vijay2910 commented 3 months ago

What steps did you take and what happened: I would like to extract additional fields like 'Description' and 'Title' from Trivy Operator reports or Prometheus metrics. I followed the documentation, added the extra fields in the values.yaml file, and then deployed the operator. In values.yaml, I have made additions to this key "additionalVulnerabilityReportFields" additionalVulnerabilityReportFields: "Description,Links,CVSS,Targets"

What did you expect to happen: I'm expecting trivy to show the additional fields which are added in values.yaml. Those should be available as labels in prometheus metrics.

Environment:

zapocalypse commented 2 months ago

Not sure if you fixed this already, but I set the metricsVulnIdEnabled under the operator setting to true:

operator: metricsVulnIdEnabled: "true"

I didn't use the additionalVulnerabilityReportFields, because it did not work for some reason.

github-actions[bot] commented 2 weeks ago

This issue is stale because it has been labeled with inactivity.