Prevent deployments if critical finding

[jonny-wg2]

Hi I'm wondering if there is a way to prevent deployments if there is a critical vulnerability identified in pod xyz.

[chen-keinan]

its can be done with admission controller , it on our plans to add support to for it in trivy-operator

[weibeld]

@chen-keinan Is there any timeline for adding the admission control feature?

For now, the most viable option for running Trivy in an admission controller seems to be devopstales/trivy-operator. I hope similar functionality will be provided by Trivy Operator soon.

[chen-keinan]

@weibeld no specific timeline , we know that it something we want to have along with other things , we are happy to get contribution from the community for it if not, we will pick it up.