You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, all frameworks are scanned by default, and there is no existing mechanism to control this behaviour via Helm.
Problem
During installation, it is not possible to specify the framework required for a specific cloud provider. As a result, I must manually extract the necessary controls from the JSON reports, which can be a time-consuming process.
Solution
Introduce a capability similar to Trivy Operator, allowing users to specify one or multiple frameworks in the values.yaml file. See Trivy Operator example.
We need to define the behavior when a user triggers a scan manually via the API and specifies frameworks that differ from the "default" frameworks. My intuition is that the API-triggered frameworks should override the "on-installation" frameworks list. Therefore, the naming should be: defaultFrameworks, which by default includes allControls, mitre, and nsa (as it currently does).
Overview
Currently, all frameworks are scanned by default, and there is no existing mechanism to control this behaviour via Helm.
Problem
During installation, it is not possible to specify the framework required for a specific cloud provider. As a result, I must manually extract the necessary controls from the JSON reports, which can be a time-consuming process.
Solution
Introduce a capability similar to Trivy Operator, allowing users to specify one or multiple frameworks in the
values.yaml
file. See Trivy Operator example.Additionally, enable this configuration through the
--set
flag in the Helm install command.Additional Information
The text was updated successfully, but these errors were encountered: