how to pass --detection-priority=comprehensive in trivy-operator #2695
ssjsk
started this conversation in
Development
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Hi,
I'm trying to setup trivy-operator helm for my local k8 cluster, its running fine, detecting vulnerabilities but with some issues. I've redis-stack pod running using image redis/redis-stack:7.2.0-v17; this redis version has a critical vulnerability CVE-2023-42282 when I check CVE database.
When I check "kubectl vulnerabilityReports my_redis_pod_replicaset", it doesn't show the said critical vulnerability in the output. To troubleshoot, if I run trivy image redis/redis-stack:7.2.0-v17 using trivy cli, by default it also doesn't show the said critical vulnerability, but if I run "trivy image redis/redis-stack:7.2.0-v17 --detection-priority comprehensive, the vulnerability is shown in the output.
trivy-operator helm chart
CVE-2023-42282
Beta Was this translation helpful? Give feedback.
All reactions