Skip to content

Commit

Permalink
docs: update builtin.md (#1335)
Browse files Browse the repository at this point in the history
  • Loading branch information
simar7 authored Oct 25, 2021
1 parent 798b564 commit 5dc8cfe
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions docs/misconfiguration/policy/builtin.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,9 @@ For suggestions or issues regarding policy content, please open an issue under [
CloudFormation and Ansible are coming soon.

## Policy Distribution
AppShield policies are destributed as OPA bundle on [GitHub Container Registry][ghcr] (GHCR).
When misconfiguration detection is enabled, Trivy pulls OPA bundle from GHCR as OCI artifact and stores it in the cache.
Then, those policies are loaded into Trivy OPA engine and used for detecting misconfigurations.
AppShield policies are distributed as an OPA bundle on [GitHub Container Registry][ghcr] (GHCR).
When misconfiguration detection is enabled, Trivy pulls the OPA bundle from GHCR as an OCI artifact and stores it in the cache.
Those policies are then loaded into Trivy OPA engine and used for detecting misconfigurations.

## Update Interval
Trivy checks for updates to OPA bundle on GHCR every 24 hours and pulls it if there are any updates.
Expand All @@ -35,4 +35,4 @@ Trivy checks for updates to OPA bundle on GHCR every 24 hours and pulls it if th
[dockerfile-bestpractice]: https://docs.docker.com/develop/develop-images/dockerfile_best-practices/
[pss]: https://kubernetes.io/docs/concepts/security/pod-security-standards/
[azure]: https://docs.microsoft.com/en-us/azure/security/fundamentals/network-best-practices
[kics]: https://github.com/Checkmarx/kics/
[kics]: https://github.com/Checkmarx/kics/

0 comments on commit 5dc8cfe

Please sign in to comment.