feat(k8s): filter kubernetes artifacts by REGO rules #8078
Labels
kind/feature
Categorizes issue or PR as related to a new feature.
target/kubernetes
Issues relating to kubernetes cluster scanning
Now Trivy k8s scan can filter k8s artifacts only by namespaces and/or kinds (nodes,pods etc).
There is an idea to add a new filter option, that allows to filter artifacts by custom REGO rules.
for example, customers can use it for skipping scan on deployments with 0 desired replicas.
reporoduction steps
Deployment with 0 replicase (
replicas0.yaml
)$ kind delete cluster --name zeroreplicas && kind create cluster --name zeroreplicas $ kubectl apply -f replicas0.yaml
Discussed in #7980
The text was updated successfully, but these errors were encountered: