aquasecurity/trivy

template output in Kubernetes scanning

Open

#3,234 opened on Nov 28, 2022

View on GitHub
 (8 comments) (0 reactions) (0 assignees)Go (35,000 stars) (371 forks)batch import
help wantedkind/featurelifecycle/activetarget/kubernetes

Description

Hello,

Currently using the command below:

trivy k8s -n MY_NAMESPACE all --report all --format template --template '@gitlab-ci.tpl'

Yields the following error:

FATAL   unable to write results: unknown format "template". Use "json" or "table"

Is it possible to maybe add a Gitlab CI Template or the instructions how the scan of a whole cluster and posting a report to Gitlab-CI could be made possible?

Contributor guide

Tech stack
go
Domain
securitydevopscli
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Go programmingTrivy codebase understandingGo template syntax
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
50
Research direction
Examine how template output is implemented for image scanning in Trivy, particularly in pkg/report/writer.go or similar. Investigate the k8s scanning command's report generation to see why template format is not supported. Look for any existing comments or PRs related to this issue. Consider adapting the existing template support to k8s subcommand, ensuring the template is populated with appropriate data. Check the gitlab ci.tpl template referenced for desired output format.