search

kaidotdev / kube-trivy-exporter

KubeTrivyExporter is Prometheus Exporter that collects all vulnerabilities detected by aquasecurity/trivy in the kubernetes cluster.
MIT License
52 stars 15 forks source link

kube-trivy-exporter dose not give trivy_vulnerabilities #11

Open devopstales opened 3 years ago

devopstales commented 3 years ago

I build the image from master branch. There is multiple image in my cluster from my private registry and public docker.io. In the log I see only the failed image. I think it would be nice if it logs the sucesfull scans too. I mounted my config.json as #3 shows, but i did not get any trivy_vulnerabilities at the prometheus endpoint. 

Failed to detect vulnerability at quay.io/external_storage/rbd-provisioner:v1.0.0-k8s1.10: failed to execute trivy: exit status 1
Failed to detect vulnerability at quay.io/coreos/kube-state-metrics:v1.8.0: failed to execute trivy: exit status 1
Failed to detect vulnerability at quay.io/external_storage/rbd-provisioner:v1.0.0-k8s1.10: failed to execute trivy: exit status 1
Failed to detect vulnerability at quay.io/coreos/kube-state-metrics:v1.8.0: failed to execute trivy: exit status 1
Failed to detect vulnerability at quay.io/external_storage/rbd-provisioner:v1.0.0-k8s1.10: failed to execute trivy: exit status 1
Failed to detect vulnerability at quay.io/coreos/kube-state-metrics:v1.8.0: failed to execute trivy: exit status 1
Failed to detect vulnerability at quay.io/external_storage/rbd-provisioner:v1.0.0-k8s1.10: failed to execute trivy: exit status 1
jeremeb commented 3 years ago

Did you ever find a fix for this? I am running into the same issue.

devopstales commented 3 years ago

@jeremeb I didn't find a solution for this problem so I started to use this: https://github.com/devopstales/trivy-scanner

loganrobertclemons commented 3 years ago

I am running into the same issue.