search

telekom-mms / trivy-dojo-report-operator

This Kubernetes operator listens for vulnerability reports generated by the Trivy Operator and forwards them to Defect Dojo for further analysis and tracking.
GNU General Public License v3.0
13 stars 14 forks source link

[Enhancement] Support for Clustercompliancereports #60

Open Pionerd opened 8 months ago

Pionerd commented 8 months ago

Description

First of all, thank you for this great operator.

From the available CRDs, you support most, but support for the ClusterComplianceReports is still missing (https://aquasecurity.github.io/trivy-operator/v0.18.5/docs/crds/clustercompliance-report/)

Additional information

No response

rndmh3ro commented 8 months ago

Thanks for the kind words and the request. :)

I don't know why I didn't include this one. I'll have to check and include it, if it works.

rndmh3ro commented 8 months ago

I checked, why this isn't included and the answer is that the trivy-operator-parser does not support ClusterComplianceReports. Someone would need to add it there, before we can add it to thew operator.

szEvEz commented 7 months ago

Looks like it's implemented and released with version https://github.com/DefectDojo/django-DefectDojo/releases/tag/2.33.0. So we can start the implementation here.

NumenDivinum commented 2 weeks ago

It seems that the report type name should just be added to the list in src/handlers.py:

allowed_reports: list[str] = [ "configauditreports", "vulnerabilityreports", "exposedsecretreports", "infraassessmentreports", "rbacassessmentreports", ]

.. and to settings.REPORTS