Festure Request: K8s cluster report

[Robs68]

Hi,

I've an issue with this tool, I haven't any results when I push a json results of K8s trivy scan.

It's perfectly work with OS trivy scan.

Is it normal ?

Thanks

Robs

[Morl99]

Hello, I am not sure I understand your issue. Can you explain in detail what kind of report you are trying to load? And can you post a screenshot of the error?

Ideal would be if you share the report with me, so I can debug the error myself.

[Robs68]

I've a cluster on Kubernetes with many pods, services ... and I execute trivy for scan all cluster hosted in my Kubernetes.

My command : trivy k8s cluster --report all -f json -o report.json

This is an exemple of the report :
test.json

I hope it's more clear :)

Robs

[Morl99]

Ah, I see, a cluster scan generates a report with another dimension: the pod
This kind of report is currently not parseable by the vulnerability explorer.

Since the report format is basically identical, it would not be too hard to implement. The question is: what would you expect from the UI in that case? Another dropdown to select a pod? Or some kind of overview over all cluster findings? The latter would be a different view and as such, a lot more work.

I will rename this issue to reflect that it is a feature request to support cluster reports. Thanks for opening it.

[Robs68]

Thanks for your reply.

For me the best option is in first time to see vulnerabilites of each pods and in second time to see the overview of all pods and misconfiguration of their.

[bastien-reinhardt]

I would also like to see this feature implemented :) Thanks a lot for your work!

[Morl99]

Thank you for this comment. I will accept a Pull Request if anybody is interested in donating this feature. I would definitely want to start by parsing the report and adding an additional dropdown to select the pod. Adding a cluster view should come later in a separate PR, if at all. I am happy to help you get started.