tenable / terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
https://runterrascan.io
Apache License 2.0
4.77k stars 503 forks source link

Terrascan Deployment using ArgoCD #1708

Open guillermocol opened 1 month ago

guillermocol commented 1 month ago

Description

I would like to get a prehook deployed in my ArgoCD test environment to run terrascan in the repository. The user guide I am trying to use is the following one:

https://runterrascan.io/docs/integrations/argocd/ ''Method 1. Configure terrascan as a PreSync hook and scan the remote repository. Configure a PreSync hook The following example of a hook yaml is nearly ready to be added to an existing kubernetes configuration. To complete the configutation, you need to:

Ensure that the secrets, known_hosts, and ssh_config volume are relevant for your specific environment. Specify a terrascan image.''

What I Did

I am trying to follow the steps on the option one creating a prehook and i have several questions:

- Which terrascan docker image could we use?
- Is it necessary the known_hosts and ssh_config file? I am going to connect it to my github repository, I thought that it would be enough just the ssh key? 

If there is more documentation in regards to this topic, it would be really helpful. 

Thank you for your help
Best regards,
GC