Trivy Operator

Trivy operator is an security tool which continuously scans your Kubernetes cluster

step 1

• Install trivy operator:

kubectl apply -f https://raw.githubusercontent.com/aquasecurity/trivy-operator/v0.10.1/deploy/static/trivy-operator.yaml

• check the operator is running:

kubectl get deployment -n trivy-system

step 2

• Clone this repo:

cd ~ && git clone https://github.com/william89731/trivy-operator && cd trivy-operator

• make your namespace.txt

• set alias:

alias trivy-operator='bash ~/trivy-operator/operator.sh ~/trivy-operator/namespace.txt'

• launch script:

trivy-operator

see result in report.txt

• for more info:

kubectl describe vuln <REPLICASET> -n <NAMESPACE>

or

kubectl describe configaudit <REPLICASET> -n <NAMESPACE>