https://github.com/kaidotdev/kube-trivy-exporter

KubeTrivyExporter is Prometheus Exporter that collects all vulnerabilities detected by aquasecurity/trivy in the kubernetes cluster.
https://github.com/kaidotdev/kube-trivy-exporter

kubernetes prometheus-exporter

Last synced: about 1 month ago
JSON representation

KubeTrivyExporter is Prometheus Exporter that collects all vulnerabilities detected by aquasecurity/trivy in the kubernetes cluster.

• Host: GitHub
• URL: https://github.com/kaidotdev/kube-trivy-exporter
• Owner: kaidotdev
• License: mit
• Created: 2019-10-22T00:00:47.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2023-02-25T04:15:17.000Z (over 1 year ago)
• Last Synced: 2024-07-04T09:25:06.581Z (2 months ago)
• Topics: kubernetes, prometheus-exporter
• Language: Go
• Homepage:
• Size: 122 KB
• Stars: 51
• Watchers: 4
• Forks: 15
• Open Issues: 12
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# KubeTrivyExporter

KubeTrivyExporter is Prometheus Exporter that collects all vulnerabilities detected by [aquasecurity/trivy](https://github.com/aquasecurity/trivy) in the kubernetes cluster.

## Installation

```shell

$ kubectl apply -k manifests

```

## Usage

```shell

$ curl http://kube-trivy-exporter:9090/metrics | grep trivy_vulnerabilities | head -n 10

# HELP trivy_vulnerabilities Vulnerabilities detected by trivy

# TYPE trivy_vulnerabilities gauge

trivy_vulnerabilities{image="gcr.io/spinnaker-marketplace/echo:2.5.1-20190612034009",installedVersion="0.168-1",pkgName="libelf1",severity="HIGH",vulnerabilityId="CVE-2018-16402"} 1

trivy_vulnerabilities{image="k8s.gcr.io/node-problem-detector:v0.7.1",installedVersion="0.168-1",pkgName="libelf1",severity="HIGH",vulnerabilityId="CVE-2018-16402"} 1

trivy_vulnerabilities{image="gcr.io/spinnaker-marketplace/echo:2.5.1-20190612034009",installedVersion="0.168-1",pkgName="libelf1",severity="MEDIUM",vulnerabilityId="CVE-2018-16062"} 1

trivy_vulnerabilities{image="gcr.io/spinnaker-marketplace/echo:2.5.1-20190612034009",installedVersion="0.168-1",pkgName="libelf1",severity="MEDIUM",vulnerabilityId="CVE-2018-16403"} 1

trivy_vulnerabilities{image="gcr.io/spinnaker-marketplace/echo:2.5.1-20190612034009",installedVersion="0.168-1",pkgName="libelf1",severity="MEDIUM",vulnerabilityId="CVE-2018-18310"} 1

trivy_vulnerabilities{image="gcr.io/spinnaker-marketplace/echo:2.5.1-20190612034009",installedVersion="0.168-1",pkgName="libelf1",severity="MEDIUM",vulnerabilityId="CVE-2018-18520"} 1

trivy_vulnerabilities{image="gcr.io/spinnaker-marketplace/echo:2.5.1-20190612034009",installedVersion="0.168-1",pkgName="libelf1",severity="MEDIUM",vulnerabilityId="CVE-2018-18521"} 1

```

## How to develop

### `skaffold dev`

```sh

$ make dev

```

### Test

```sh

$ make test

```

### Lint

```sh

$ make lint

```