simar7 comments

Results 396 comments of


                                            simar7

feat(k8s): improve k8s scanning to handle namespace-restricted controllers

Closed via https://github.com/aquasecurity/trivy/pull/8918

additionalVulnerabilityReportFields is not working as expected.

@vijay2910 @zapocalypse could you try the latest release? Setting `additionalVulnerabilityReportFields` is a comma separate value. Please let us know if you still have issues.

Missing feature when migrating from tfsec

Hi, I'm not sure how tfsec action is able to meet requirement 3 as we have no control over it. The Advanced security limitation is enforced by GitHub, not by...

Missing feature when migrating from tfsec

I see. Thanks for the explanation @jrobison-sb. We built Trivy-action with the snapshots api in mind as we're able to expose the results in a format that it expects. This...

fix: Add extraEnv option to Helm chart

@gnadaban could you resolve the merge conflict?

fix(terraform): 'count' meta argument sourced from submodule output

> @simar7 The Terraform configuration evaluation logic is getting more and more complicated and confusing. What if we apply graph theory to solve this problem, as done in terraform or...

[fix] Use environment variable for GitHub API

Thanks for the PR! Rather than passing this in as-is, can we define a custom variable that can be overwritten by the user if needed but has a default value...

[fix] Use environment variable for GitHub API

It would also be helpful if you can test this change and share the results with us.

Trivy-action fails on local images in self hosted GHA runners dind mode - EKS

I've never tried running Trivy-action with self hosted runners so I can't comment much. It might be very well the case that it isn't supported today to run on self...

BREAKING: Deprecate `avd_id` and `short_code` for misconfiguration checks

> [@simar7](https://github.com/simar7) `long_id` is built from `provider` + `service` (if present) + `short_code`. The metadata already includes all these fields. Why remove `short_code` and add `long_id` if it essentially duplicates...