Harness your existing Container Image Vulnerability Scanning information to your Kubernetes Cluster.
curl https://raw.githubusercontent.com/alcideio/iskan/master/download.sh | bash
# Scan the cluster pointed by the kubeconfig context 'myctx'
iskan cluster --cluster-context mycluster --api-config myconfig.yaml
# Get vulnerability information for a specific image
iskan image --image="gcr.io/myproj/path/to/myimage:v1.0" --api-config myconfig.yaml -f table --filter-severity CRITICAL,HIGH
Provider | References |
---|---|
ECR | ECR Policies, ECR Image Scanning |
GCR | Enabling the Container Scanning API |
ACR | Azure Defender, Vulnerability Assessment in Azure |
InsightVM | InsightVM Container Security |
Harbor | Harbor Administration |
Trivy | Trivy on GitHub |