
kubernetes 리소스의 이미지를 스캔하는 Trivy 플러그인
쿠버네티스 리소스의 이미지를 스캔하는 Trivy 플러그인
$ trivy plugin install github.com/aquasecurity/trivy-plugin-kubectl
$ trivy kubectl -h
Usage: trivy kubectl [-h,--help] TYPE NAME [TRIVY OPTION]
A Trivy plugin that scans the images of a kubernetes resource.
Options:
-h, --help Show usage.
Examples:
# Scan a Pod
trivy kubectl pod mypod
# Scan a Deployment
trivy kubectl deployment mydeployment -n mynamespace
# Scan a Job and filter by severity
trivy kubectl job myjob -n mynamespace -- --severity CRITICAL
Trivy의 옵션은 -- 뒤에 전달해야 합니다.
# Scan a Pod
$ trivy kubectl pod mypod
# Scan a Deployment
$ trivy kubectl deployment mydeployment -n mynamespace
# Scan a Job and filter by severity
$ trivy kubectl job myjob -n mynamespace -- --severity CRITICAL