2025-09-22 19:23:45 +02:00
|
|
|
#!/usr/bin/env sh
|
|
|
|
|
set -euo pipefail
|
|
|
|
|
export HOME="/tmp"
|
|
|
|
|
TRIVY_CACHE_DIR="/tmp/cache"
|
|
|
|
|
mkdir -p /tmp/.trivy
|
|
|
|
|
mkdir -p ${TRIVY_CACHE_DIR}
|
|
|
|
|
trivy plugin install scan2html
|
|
|
|
|
trivy k8s --report=${REPORT_TYPE:-all} \
|
|
|
|
|
--exit-code=0 \
|
|
|
|
|
--severity=${LEVELS:-CRITICAL,HIGH,MEDIUM} \
|
2026-05-22 23:41:26 +02:00
|
|
|
--scanners ${SCANNERS:-vuln,misconfig} \
|
|
|
|
|
-o /tmp/trivy.json \
|
2025-09-22 19:23:45 +02:00
|
|
|
--format json \
|
|
|
|
|
--disable-node-collector \
|
|
|
|
|
--parallel ${PARALLEL:-5}
|
2026-05-22 23:41:26 +02:00
|
|
|
trivy scan2html generate --scan2html-flags --output /tmp/report.html --from /tmp/trivy.json
|
