[Operator] Add support for Trivy Client Parameters for Trivy offline scanning #613
-
|
Is it possible to pass the trivy parameter
to allow offline scanning of vulnerabilities. Assuming I have an custom image pre-loaded with the CVE database in my own private repository accessible to the Openshift/K8 cluster. I am planning to run starboard in an air-gapped environment I am aware of #541 but I'm not sure if the parameters included in that enhancement would cover this. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
We do not officially support Starboard run with Trivy plugin in air-gapped environments. The --skip-update flag is just part of a possible solution. To properly design and support such RFE we've created #617 Feel free to elaborate and share your ideas in the comments of #617 how this might work in a generic way so we can hopefully make it part of Starboard. |
Beta Was this translation helpful? Give feedback.
We do not officially support Starboard run with Trivy plugin in air-gapped environments. The --skip-update flag is just part of a possible solution.
To properly design and support such RFE we've created #617 Feel free to elaborate and share your ideas in the comments of #617 how this might work in a generic way so we can hopefully make it part of Starboard.