Scan running workload

[hamza86]

Question

Hi all,

We currently rely on Trivy to scan container images stored in our Harbor registry, and we’ve also been testing the Trivy Operator to scan running workloads in our Kubernetes cluster.

One thing I’ve noticed is that the operator only starts a scan when a new deployment occurs. What seems to be missing is the ability to continuously or periodically rescan existing workloads, such as running a nightly scan.

Is there a way to configure Trivy Operator to scan workloads on a recurring schedule, for example, every night?

Thanks in advance!

Target

Container Image

Scanner

Vulnerability

Output Format

None

Mode

None

Operating System

No response

Version

0.23.1