Export Directory for HTML Trivy Reports

[pthoelken]

It's possible to create the option in the harbor.yml file to setup the following Trivy settings?

• automatic HTML reports from every Trivy scans
• choose Trivy HTML report output directory
• choose Trivy HTML report name pattern

[zyyw]

https://github.com/goharbor/community/pull/174

[pthoelken]

@zyyw how can I use it? Any documentations?

[danielpacak]

The whole concept of integrating Trivy with Harbor is based on Pluggable Scanners API and scanner updaters that return JSON data that is then rendered in Harbor UI as dynamic HTML. You can also consume JSON reports through Harbor RESTful APIs. However, there's no way to configure output directory and save static HTML vulnerability reports.

[pthoelken]

As we can see here there is a DIRECTORY option for Reports? https://github.com/aquasecurity/harbor-scanner-trivy#configuration

Is this not a possible solution to export the Reports?

[danielpacak]

This configuration is an implementation detail of Harbor Scanner Trivy to store a JSON report generated by Trivy executable binary before it's served (pulled by Harbor) via HTTP endpoint. Notice also the proposal mentioned by @zyyw, which allows users to export vulnerability reports in different formats through Harbor UI. I'm not sure, however, what is the implementation status of this feature.

[pthoelken]

It's maybe also possible to insert a button "Download PDF Report" in the section where I can see the Trivy HTML generated report in Harbor UI?

[danielpacak]

Please review the community proposal mentioned by us and share your feedback there so we can keep it in one place.