feat(trivy): add Trivy integration with Kubernetes, including cron job and email reporting

terraform/k8sapps/apps.tf

@@ -114,3 +114,17 @@ module "sftpgo" {
   access_key = scaleway_iam_api_key.sftpgo_app_api.access_key
   secret_key = scaleway_iam_api_key.sftpgo_app_api.secret_key
 }
+
+module "trivy" {
+  source = "../modules/utils/trivy"
+
+  persistent_folder = local.persistent_folder
+  cron_schedule     = local.trivy_cronjob_schedule
+
+  smtp_host     = local.scaleway_smtp_host
+  smtp_port     = local.scaleway_smtp_port
+  smtp_username = var.scaleway_project_id
+  smtp_password = scaleway_iam_api_key.mail_app_api.secret_key
+  from_email    = "trivy@${local.primary_domain}"
+  to_email      = "c.alexandre.pires@${local.primary_domain}"
+}

terraform/k8sapps/config.tf

@@ -39,6 +39,9 @@ locals {
 
   rustdesk_fqdn = "rustdesk.${local.primary_domain}"
 
+  # trivy
+  trivy_cronjob_schedule = "0 1 1/15 * *"
+
   # backup
   local_backup_retention_days       = 2
   cloud_backup_retention_days       = 3