search

kaidotdev / kube-trivy-exporter

KubeTrivyExporter is Prometheus Exporter that collects all vulnerabilities detected by aquasecurity/trivy in the kubernetes cluster.
MIT License
52 stars 15 forks source link

Update trivy version and run as non-root by default #8

Open chgl opened 3 years ago

chgl commented 3 years ago

This updates trivy and the alpine base image to the latest version.

Also runs the container as non-root by default (the new kube-trivy-exporter user). I updated the mount path and security contexts for the statefulset accordingly.

⚠Note that I removed the --enable-tracing arg and set the image to my personal build to test the changes. That's why I've marked this PR as a draft for now. Let me know if/when I should revert these parts. (It would be great if the container image could be hosted on ghcr.io or some other registry that allows hosting publicly accessible images without requiring the imagePullSecret to be set.).