trivy
trivy copied to clipboard
bug(k8s): k8s scan works too long
Description
Trivy kubernetes scan takes a lot of time for small minikube cluster:
$ time trivy k8s --report summary --debug --disable-node-collector --timeout 30m0s
491,23s user 49,05s system 55% cpu 16:21,43 total
As said in #7661 Trivy fails even for test environment.
Reason
Trivy creates a new scanner for each kubernetes artifact: https://github.com/aquasecurity/trivy/blob/ab3a3b2e6ed15db90967084fac825ddb2f50e70d/pkg/k8s/scanner/scanner.go#L158 https://github.com/aquasecurity/trivy/blob/ab3a3b2e6ed15db90967084fac825ddb2f50e70d/pkg/k8s/scanner/scanner.go#L184
Solution
As an idea we can try to optimize using of scanners.
Reproduction Steps
$ trivy k8s --report summary --debug --disable-node-collector --timeout 30m0s