feat: kubernetes bill of materials

Signed-off-by: chenk <hen.keinan@gmail.com>
aquasecurity · Jun 14, 2023 · 0d0178b · 0d0178b
1 parent 28f0d18
commit 0d0178b
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 10 deletions.
diff --git a/docs/docs/supply-chain/sbom.md b/docs/docs/supply-chain/sbom.md
@@ -19,13 +19,6 @@ $ trivy image --format spdx-json --output result.json alpine:3.15
 $ trivy fs --format cyclonedx --output result.json /app/myproject
 ```
 
-Kubernetes sbom i.e. kbom
-Kubernetes sbom referred to as kbom, produces the k8s core components (Control Plane Components, Node Components and Addons) bill of material.
-
-```
-trivy k8s cluster --format cyclonedx --output result.json
-```
-
 <details>
 <summary>Result</summary>
 

diff --git a/docs/docs/target/kubernetes.md b/docs/docs/target/kubernetes.md
@@ -348,7 +348,11 @@ Trivy has a native [Kubernetes Operator][operator] which continuously scans your
 
 Trivy supports the generation of Kubernetes Bill of Materials (KBOM) for kubernetes cluster control plane components, node components and addons.
 
-### Generation
+## KBOM
 
-Trivy can generate KBOM in cyclonedx format for kubernetes cluster core components .
-See [here](../supply-chain/sbom.md) for the detail.
+KBOM, Kubernetes Bill of Materials, is a manifest of all the important components that make up your Kubernetes cluster – Control plane components, Node Components, and Addons, including their versions and images. Which “api-server” version are you currently running? Which flavor of “kubelet” is running on each node? What kind of etcd or storage are you currently using? And most importantly – are there any vulnerabilities known to affect these components? These are all questions that KBOM can help you answer.
+Trivy can generate KBOM in CycloneDX format:
+
+```sh
+trivy k8s cluster --format cyclonedx
+```