refactor(misconf): Merging trivy-iac
into Trivy
#5626
Labels
kind/feature
Categorizes issue or PR as related to a new feature.
scan/misconfiguration
Issues relating to misconfiguration scanning
Milestone
After several discussions it was concluded that it might be best to merge
trivy-iac
into Trivy. This has several benefits:trivy-iac
release can be coupled with Trivy. This will reduce co-ordination between the two projects, previously defsec (nowtrivy-iac
) will have to release first, and then be incorporated into Trivy.This transition will follow the
fanal
model. We plan to integratetrivy-iac
into Trivy in a similar fashion.As for
trivy-policies
it will remain as-is but will be renamedtrivy-checks
more on that in this issue: #5609As for
trivy-aws
, it will remain as-is for now. In the future, it will be converted into a Trivy plugin, thereby eliminating and AWS SDK dependencies from within Trivy, thereby reducing the overall dependency footprint of Trivy.The text was updated successfully, but these errors were encountered: