Skip to content

Export fields Target and Class as labels #201

Open
@d-mankowski-synerise

Description

Hello,
in vulnerability reports created by trivy-operator there are optional report fields, like Target or Class:

  - class: lang-pkgs
    fixedVersion: "1.32"
    installedVersion: "1.25"
    links: []
    primaryLink: https://avd.aquasec.com/nvd/cve-2022-38752
    resource: org.yaml:snakeyaml
    score: 6.5
    severity: MEDIUM
    target: Java
    title: 'snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode'
    vulnerabilityID: CVE-2022-38752

It would be really cool to see a summary in Grafana dashboards what % of vulnerabilities come from OS vs application. It seems like adding these fields to exporter would be as simple as adding two more variables here and here, since these types are defined in Vulnerability struct (although, my golang knowledge is very, very limited).

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions