Open
Description
Overview
Currently, all frameworks are scanned by default, and there is no existing mechanism to control this behaviour via Helm.
Problem
During installation, it is not possible to specify the framework required for a specific cloud provider. As a result, I must manually extract the necessary controls from the JSON reports, which can be a time-consuming process.
Solution
-
Introduce a capability similar to Trivy Operator, allowing users to specify one or multiple frameworks in the
values.yaml
file. See Trivy Operator example.specs: - k8s-cis-1.23 - k8s-nsa-1.0 - k8s-pss-baseline-0.1 - k8s-pss-restricted-0.1
Additionally, enable this configuration through the --set
flag in the Helm install command.
Additional Information
# I would want to be able to set for GKE:
frameworks:
- AllControls
- cis-v1.23-t1.0.1
# For AKS:
frameworks:
- cis-aks-t1.2.0
Metadata
Metadata
Assignees
Type
Projects
Status
Feature
Activity