solo-io / go-utils

golang utilities
Apache License 2.0
110 stars 18 forks source link

Create vulnerability Github Issues on Trivy scan #456

Closed saiskee closed 2 years ago

saiskee commented 2 years ago

Adds option to Security Scanner to create github issues for each image that a vulnerability is found in. If an issue already exists for that image, it will update the issue with the most recent vulnerability scan results.

This is especially useful for reporting vulnerabilities in private repositories, because the "Code scanning results" tab for private repositories is a paid-feature.

Example generated issue: https://github.com/solo-io/solo-projects/issues/2467

solo-changelog-bot[bot] commented 2 years ago

Issues linked to changelog: https://github.com/solo-io/gloo/issues/5048