aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
https://trivy.dev
Apache License 2.0
23.89k stars 2.35k forks source link

NSA Compliance percentage are lower after installing OPA gatekeeper #3136

Open chen-keinan opened 2 years ago

chen-keinan commented 2 years ago

When running trivy k8s compliance=nsa report summary command The scores seem to go down "significantly" once we deploy OPA Gatekeeper with restrictive enforcement policies.

We are unable to explain why this is happening.

We have turnkey support for OPA Gatekeeper in our platform via kubernetes-policy-management and can lock down the cluster "significantly" via turnkey policies we provide our customers.

chen-keinan commented 2 years ago

Related #3179