开源地址:https://github.com/aquasecurity/harbor-scanner-trivy scanner-trivy 是通过环境变量读取配置 启动命令: BASH 1 SCANNER_API_SERVER_ADDR=:8181 SCANNER_REDIS_URL=redis://localhost:6379 ./scanner-trivy 或者通过supervisor运行 BASH 1234567891011 [program:trivy]numprocs=1user=rootcommand=/data...
# If the flag is enabled you have to download the `trivy-offline.tar.gz` archive manually, extract `trivy.db` and # `metadata.json` files andmounttheminthe `/home/scanner/.cache/trivy/db` path. skip_update:true# # The offline_scan option prevents Trivy from sending API requests to id...
这将安装 Trivy 插件,并使其与 Harbor 集成。 三、配置 Harbor 和 Trivy 安装完成后,我们需要配置 Harbor 和 Trivy。首先,在 Harbor 中创建一个新的扫描器。在 Harbor 管理界面中,选择“Administration”->“Interrogation Services”->“Scanner”,然后选择“New Scanner”。在弹出的对话框中,填写扫描器的相关信息...
选择Administration -> Interrogation Services -> Scanner 选择New Scanner 这里填写就比较简单了: Endpoint 这里注意一下是trivy容器的名加端口 填写完之后TEST CONNECTION一下看是否能连通。可以的话点save即可。添加之后可以看到trivy的详细配置信息。 选择trivy,然后算则SET AS DEFAULT,接下来你就可以在Vulnerability菜...
harbor整合的trivy,其加载漏洞库是直接从trivy官网走的,和上面描述的问题相似,速度很慢无法下载完成扫描。只能使用离线模式,下载解压后,目录映射到容器中的/home/scanner/.cache/trivy/db/下,宿主机目录在harbor.yml中定义的data_volume目录下的trivy-adapter/trivy/db目录里。修改harbor.yml的trivy.skip_update为true...
name: harbor-scanner-trivy version: 0.31.2 epoch: 0 epoch: 1 description: Use Trivy as a plug-in vulnerability scanner in the Harbor registry copyright: - license: Apache-2.0 dependencies: runtime: - ca-certificates-bundle - trivy pipeline: - uses: git-checkout 0 comments on commit 12072...
Use Trivy as a plug-in vulnerability scanner in the Harbor registry - harbor-scanner-trivy/Dockerfile.dev at main · goharbor/harbor-scanner-trivy
看到Harbor1.0默认安装了clair做为漏洞扫描器,添加trivy 作为默认漏洞扫描器 1. 2. 3. 4. 3.1. 查看版本 https://github.com/aquasecurity/harbor-scanner-trivy [root@localhost home/harbor]# docker pull aquasec/harbor-scanner-trivy:0.19.0 1. ...
(healthy) nginx nginx -g daemon off; Up (healthy) 0.0.0.0:80->8080/tcp, 0.0.0.0:443->8443/tcpredis redis-server /etc/redis.conf Up (healthy) registry /home/harbor/entrypoint.sh Up (healthy) registryctl /home/harbor/start.sh Up (healthy) trivy-adapter /home/scanner/entrypoint.sh Up ...
1. 使用oras 拉取trivy-db:2 因为国内访问trivy-db经常出现网络问题,这边使用oras工具提前将trivy-db下载下来,使用离线的trivy-db对镜像进行扫描。 安装oras export VERSION="1.0.0" curl -LO "https://github.com/oras-project/oras/releases/download/v${VERSION}/oras_${VERSION}_linux_amd64.tar.gz" ...