Production and cloud Integrations

Kubernetes

Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications.

Trivy Operator (Official)

Using the Trivy Operator you can install Trivy into a Kubernetes cluster so that it automatically and continuously scan your workloads and cluster for security issues.

👉 Get it at: https://github.com/aquasecurity/trivy-operator

Harbor (Official)

Harbor is an open source cloud native container and artifact registry.

Trivy is natively integrated into Harbor, no installation is needed. More info in Harbor documentation: https://goharbor.io/docs/2.6.0/administration/vulnerability-scanning

Kyverno (Community)

Kyverno is a policy management tool for Kubernetes.

You can use Kyverno to ensure and enforce that deployed workloads' images are scanned for vulnerabilities.

👉 Get it at: https://neonmirrors.net/post/2022-07/attesting-image-scans-kyverno

Zora (Community)

Zora is an open-source solution that scans Kubernetes clusters with multiple plugins at scheduled times.

Trivy is integrated into Zora as a vulnerability scanner plugin.

👉 Get it at: https://zora-docs.undistro.io/latest/plugins/trivy/

Helmper (Community)

Helmper is a go program that reads Helm Charts from remote OCI registries and pushes the Helm Charts and the Helm Charts container images to your OCI registries with optional OS level vulnerability patching

Trivy is integrated into Helmper as a vulnerability scanner in combination with Copacetic to fix detected vulnerabilities.

👉 Get it at: https://github.com/ChristofferNissen/helmper