solo-io / go-utils

golang utilities
Apache License 2.0
110 stars 18 forks source link

Further Generalize Trivy Scanning into repo-agnostic CLI #467

Closed mlholland closed 2 years ago

mlholland commented 2 years ago

The Gloo Edge repo has a CLI that is a repo-specific tool for using the code defined in go-utils/securityscanutils. We should make a repo-agnostic variant of this tool that lives in alongside the its subcomponents. If done properly, other repos will only a makefile command and a github action yaml file in order to add regular CVE scanning.