Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor(misconf): Merging trivy-iac into Trivy #5626

Closed
simar7 opened this issue Nov 21, 2023 · 0 comments · Fixed by #6005 or #6109
Closed

refactor(misconf): Merging trivy-iac into Trivy #5626

simar7 opened this issue Nov 21, 2023 · 0 comments · Fixed by #6005 or #6109
Assignees
Labels
kind/feature Categorizes issue or PR as related to a new feature. scan/misconfiguration Issues relating to misconfiguration scanning
Milestone

Comments

@simar7
Copy link
Member

simar7 commented Nov 21, 2023

After several discussions it was concluded that it might be best to merge trivy-iac into Trivy. This has several benefits:

  1. trivy-iac release can be coupled with Trivy. This will reduce co-ordination between the two projects, previously defsec (now trivy-iac) will have to release first, and then be incorporated into Trivy.
  2. Easier contribution workflow: New services added to misconfiguration scanning can be directly added to Trivy as misconfiguration scanning is a core component of Trivy.

This transition will follow the fanal model. We plan to integrate trivy-iac into Trivy in a similar fashion.

As for trivy-policies it will remain as-is but will be renamed trivy-checks more on that in this issue: #5609

As for trivy-aws, it will remain as-is for now. In the future, it will be converted into a Trivy plugin, thereby eliminating and AWS SDK dependencies from within Trivy, thereby reducing the overall dependency footprint of Trivy.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment