trivy-plugin-aqua

Trivy plugin for integration with Aqua Security SaaS platform

Usage

Trivy's options need to be passed after --. Trivy receives a target directory containing IaC files

Set Aqua plugin as Trivy's current default plugin by exporting an environment variable

  export TRIVY_RUN_AS_PLUGIN=aqua

Scan an IaC target

  trivy  <target>

Scan an IaC target and tag the scan

  trivy  <target>

Scan an IaC target and report only specific severities

  trivy --severities CRITICAL,HIGH <target>

Command Line Arguments

Environment Variables

Required

The only explicitly required environment variables are

Optional

Trivy will attempt to resolve the following details from the available environment variables;

• repository name
• branch name
• commit id
• committing user
• build system

There are some special case env vars;

Scanners

Certain scanners have additional behaviors

Pipelines

The pipelines scanner is enabled, to skip fetch and scan pipelines add --skip-pipelines flag. pipelines scanning uses Pipeline Parser to parse the pipelines, and therefore, supports only the platforms that are supported by the package.

The results of the scanner are:

• parsed version of the pipeline files
• pipeline misconfigurations