Set up Trivy integration after Harbor (bare-metal) has been stood up #1347
Unanswered
distortedsignal
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I stood up a Harbor server a few months ago and my team now heavily relies on it.
I would like to stand up a Trivy server to scan images that are pushed to the Harbor server.
I was able to download and install Trivy via yum using the instructions on this page.
> trivy --version Version: 0.20.2 Vulnerability DB: Type: Full Version: 1 UpdatedAt: 2021-10-29 18:05:16.116393668 +0000 UTC NextUpdate: 2021-10-30 00:05:16.116392968 +0000 UTC DownloadedAt: 2021-10-29 18:39:27.815329963 +0000 UTC
I understand that if I was installing Harbor for the first time, I could use the
--with-trivy
flag to install Trivy and automatically have the integration done for me. That is not an option in this case.I'm not super clear on how to integrate Trivy with a pre-installed instance of Harbor. Is there documentation that I'm missing? I found the Harbor-Scanner-Trivy, but that looks like it needs to be run in K8s, while my Harbor instance is installed on the host directly.
Beta Was this translation helpful? Give feedback.
All reactions