trivy-enforcer

EXPERIMENTAL

Kubernetes Operator for Image Assurance

It works as

• Admission Controller
  • protecting unsafe images from being deployed
• Custom Controller
  • watching ImageVulnerability CRD and scanning the image in the custom resource automatically

Setup

$ kubectl apply -f manifests/opa.yaml
$ kubectl apply -f manifests/cert-manager.yaml
$ export IMG=your_account/controller:latest
$ make docker-push
$ make deploy

Development

$ kubectl apply -f manifests/opa.yaml
$ kubectl apply -f manifests/cert-manager.yaml
$ skaffold dev