How to show vulnerability details in Grafana dashboard

[ssjsk]

Hi,
I've managed to configure Prometheus, Graphana to show trivy operator vullnerability reports based on this article, but this is less meaningful as it I don't see the details of vulnerabilities.

I can connect to terminal and do Kubectl describe a-b-c-vulnerabilityreport in my k8 cluster, which shows the different vulnerabilities found, but I would like to show these in Grafana directly. I managed to get some other sample and its appearing like this picture as of now , using 16331.

What I'd like to see is the data in CVE details panel. My query for the same is as following and its not working obviously.

sum(trivy_vulnerability_id{vuln_id=~"CVE.*"}) by (namespace, image_registry, image_repository, image_tag, vuln_id, severity)

Can someone please guide how to fix it, or if there is working grafana dashboard I can use. any pointers/help is greatly appreciated.

[Kouzi99]

Hi,
i belive

  # -- additionalVulnerabilityReportFields is a comma separated list of additional fields which
  # can be added to the VulnerabilityReport. Supported parameters: Description, Links, CVSS, Target, Class, PackagePath and PackageType
  additionalVulnerabilityReportFields: ""

and :

  # -- metricsFindingsEnabled the flag to enable metrics for findings
  metricsFindingsEnabled: true

  # -- metricsVulnIdEnabled the flag to enable metrics about cve vulns id
  # be aware of metrics cardinality is significantly increased with this feature enabled.
  metricsVulnIdEnabled: true

  # -- exposedSecretScannerEnabled the flag to enable exposed secret scanner
  exposedSecretScannerEnabled: true

  # -- MetricsExposedSecretInfo the flag to enable metrics about exposed secrets
  # be aware of metrics cardinality is significantly increased with this feature enabled.
  metricsExposedSecretInfo: false

  # -- MetricsConfigAuditInfo the flag to enable metrics about configuration audits
  # be aware of metrics cardinality is significantly increased with this feature enabled.
  metricsConfigAuditInfo: true

  # -- MetricsRbacAssessmentInfo the flag to enable metrics about Rbac Assessment
  # be aware of metrics cardinality is significantly increased with this feature enabled.
  metricsRbacAssessmentInfo: false

  # -- MetricsInfraAssessmentInfo the flag to enable metrics about Infra Assessment
  # be aware of metrics cardinality is significantly increased with this feature enabled.
  # metricsInfraAssessmentInfo: false
  metricsInfraAssessmentInfo: true

  # -- MetricsImageInfo the flag to enable metrics about Image Information of scanned images
  # This information has image os information including os family, name/version, and if end of service life has been reached
  # be aware of metrics cardinality is significantly increased with this feature enabled.
  # metricsImageInfo: false
  metricsImageInfo: true

  # -- MetricsClusterComplianceInfo the flag to enable metrics about Cluster Compliance
  # be aware of metrics cardinality is significantly increased with this feature enabled.
  metricsClusterComplianceInfo: true

Will help a lot. Then in Grafana like this for example :
sum(trivy_vulnerability_id{vuln_id=~"CVE.*", namespace=~"$namespace", cluster=~"$cluster", severity="Critical"}) by (namespace, image_registry, image_repository, image_tag, vuln_id, severity,vuln_score,fixed_version, resource_name, last_modified_date)